Permission names¶
Every name in cfn_typed.permissions, taken from awacs (BSD-2-Clause). See Permission names for how they are chosen and credited.
DynamoDb¶
| Name | Action |
|---|---|
DynamoDb.AssociateTableReplica |
dynamodb:AssociateTableReplica |
DynamoDb.BatchGetItem |
dynamodb:BatchGetItem |
DynamoDb.BatchWriteItem |
dynamodb:BatchWriteItem |
DynamoDb.ConditionCheckItem |
dynamodb:ConditionCheckItem |
DynamoDb.CreateBackup |
dynamodb:CreateBackup |
DynamoDb.CreateGlobalTable |
dynamodb:CreateGlobalTable |
DynamoDb.CreateGlobalTableWitness |
dynamodb:CreateGlobalTableWitness |
DynamoDb.CreateTable |
dynamodb:CreateTable |
DynamoDb.CreateTableReplica |
dynamodb:CreateTableReplica |
DynamoDb.DeleteBackup |
dynamodb:DeleteBackup |
DynamoDb.DeleteGlobalTableWitness |
dynamodb:DeleteGlobalTableWitness |
DynamoDb.DeleteItem |
dynamodb:DeleteItem |
DynamoDb.DeleteResourcePolicy |
dynamodb:DeleteResourcePolicy |
DynamoDb.DeleteTable |
dynamodb:DeleteTable |
DynamoDb.DeleteTableReplica |
dynamodb:DeleteTableReplica |
DynamoDb.DescribeBackup |
dynamodb:DescribeBackup |
DynamoDb.DescribeContinuousBackups |
dynamodb:DescribeContinuousBackups |
DynamoDb.DescribeContributorInsights |
dynamodb:DescribeContributorInsights |
DynamoDb.DescribeEndpoints |
dynamodb:DescribeEndpoints |
DynamoDb.DescribeExport |
dynamodb:DescribeExport |
DynamoDb.DescribeGlobalTable |
dynamodb:DescribeGlobalTable |
DynamoDb.DescribeGlobalTableSettings |
dynamodb:DescribeGlobalTableSettings |
DynamoDb.DescribeImport |
dynamodb:DescribeImport |
DynamoDb.DescribeKinesisStreamingDestination |
dynamodb:DescribeKinesisStreamingDestination |
DynamoDb.DescribeLimits |
dynamodb:DescribeLimits |
DynamoDb.DescribeReservedCapacity |
dynamodb:DescribeReservedCapacity |
DynamoDb.DescribeReservedCapacityOfferings |
dynamodb:DescribeReservedCapacityOfferings |
DynamoDb.DescribeStream |
dynamodb:DescribeStream |
DynamoDb.DescribeTable |
dynamodb:DescribeTable |
DynamoDb.DescribeTableReplicaAutoScaling |
dynamodb:DescribeTableReplicaAutoScaling |
DynamoDb.DescribeTimeToLive |
dynamodb:DescribeTimeToLive |
DynamoDb.DisableKinesisStreamingDestination |
dynamodb:DisableKinesisStreamingDestination |
DynamoDb.EnableKinesisStreamingDestination |
dynamodb:EnableKinesisStreamingDestination |
DynamoDb.ExportTableToPointInTime |
dynamodb:ExportTableToPointInTime |
DynamoDb.GetAbacStatus |
dynamodb:GetAbacStatus |
DynamoDb.GetItem |
dynamodb:GetItem |
DynamoDb.GetRecords |
dynamodb:GetRecords |
DynamoDb.GetResourcePolicy |
dynamodb:GetResourcePolicy |
DynamoDb.GetShardIterator |
dynamodb:GetShardIterator |
DynamoDb.ImportTable |
dynamodb:ImportTable |
DynamoDb.InjectError |
dynamodb:InjectError |
DynamoDb.ListBackups |
dynamodb:ListBackups |
DynamoDb.ListContributorInsights |
dynamodb:ListContributorInsights |
DynamoDb.ListExports |
dynamodb:ListExports |
DynamoDb.ListGlobalTables |
dynamodb:ListGlobalTables |
DynamoDb.ListImports |
dynamodb:ListImports |
DynamoDb.ListStreams |
dynamodb:ListStreams |
DynamoDb.ListTables |
dynamodb:ListTables |
DynamoDb.ListTagsOfResource |
dynamodb:ListTagsOfResource |
DynamoDb.PartiQLDelete |
dynamodb:PartiQLDelete |
DynamoDb.PartiQLInsert |
dynamodb:PartiQLInsert |
DynamoDb.PartiQLSelect |
dynamodb:PartiQLSelect |
DynamoDb.PartiQLUpdate |
dynamodb:PartiQLUpdate |
DynamoDb.PurchaseReservedCapacityOfferings |
dynamodb:PurchaseReservedCapacityOfferings |
DynamoDb.PutItem |
dynamodb:PutItem |
DynamoDb.PutResourcePolicy |
dynamodb:PutResourcePolicy |
DynamoDb.Query |
dynamodb:Query |
DynamoDb.ReadDataForReplication |
dynamodb:ReadDataForReplication |
DynamoDb.ReplicateSettings |
dynamodb:ReplicateSettings |
DynamoDb.RestoreTableFromAwsBackup |
dynamodb:RestoreTableFromAwsBackup |
DynamoDb.RestoreTableFromBackup |
dynamodb:RestoreTableFromBackup |
DynamoDb.RestoreTableToPointInTime |
dynamodb:RestoreTableToPointInTime |
DynamoDb.Scan |
dynamodb:Scan |
DynamoDb.StartAwsBackupJob |
dynamodb:StartAwsBackupJob |
DynamoDb.TagResource |
dynamodb:TagResource |
DynamoDb.UntagResource |
dynamodb:UntagResource |
DynamoDb.UpdateAbacStatus |
dynamodb:UpdateAbacStatus |
DynamoDb.UpdateContinuousBackups |
dynamodb:UpdateContinuousBackups |
DynamoDb.UpdateContributorInsights |
dynamodb:UpdateContributorInsights |
DynamoDb.UpdateGlobalTable |
dynamodb:UpdateGlobalTable |
DynamoDb.UpdateGlobalTableSettings |
dynamodb:UpdateGlobalTableSettings |
DynamoDb.UpdateGlobalTableVersion |
dynamodb:UpdateGlobalTableVersion |
DynamoDb.UpdateItem |
dynamodb:UpdateItem |
DynamoDb.UpdateKinesisStreamingDestination |
dynamodb:UpdateKinesisStreamingDestination |
DynamoDb.UpdateTable |
dynamodb:UpdateTable |
DynamoDb.UpdateTableReplicaAutoScaling |
dynamodb:UpdateTableReplicaAutoScaling |
DynamoDb.UpdateTimeToLive |
dynamodb:UpdateTimeToLive |
DynamoDb.WriteDataForReplication |
dynamodb:WriteDataForReplication |
Ecr¶
| Name | Action |
|---|---|
Ecr.BatchCheckLayerAvailability |
ecr:BatchCheckLayerAvailability |
Ecr.BatchDeleteImage |
ecr:BatchDeleteImage |
Ecr.BatchGetImage |
ecr:BatchGetImage |
Ecr.BatchGetRepositoryScanningConfiguration |
ecr:BatchGetRepositoryScanningConfiguration |
Ecr.BatchImportUpstreamImage |
ecr:BatchImportUpstreamImage |
Ecr.CompleteLayerUpload |
ecr:CompleteLayerUpload |
Ecr.CreatePullThroughCacheRule |
ecr:CreatePullThroughCacheRule |
Ecr.CreateRepository |
ecr:CreateRepository |
Ecr.CreateRepositoryCreationTemplate |
ecr:CreateRepositoryCreationTemplate |
Ecr.DeleteLifecyclePolicy |
ecr:DeleteLifecyclePolicy |
Ecr.DeletePullThroughCacheRule |
ecr:DeletePullThroughCacheRule |
Ecr.DeleteRegistryPolicy |
ecr:DeleteRegistryPolicy |
Ecr.DeleteRepository |
ecr:DeleteRepository |
Ecr.DeleteRepositoryCreationTemplate |
ecr:DeleteRepositoryCreationTemplate |
Ecr.DeleteRepositoryPolicy |
ecr:DeleteRepositoryPolicy |
Ecr.DeleteSigningConfiguration |
ecr:DeleteSigningConfiguration |
Ecr.DeregisterPullTimeUpdateExclusion |
ecr:DeregisterPullTimeUpdateExclusion |
Ecr.DescribeImageReplicationStatus |
ecr:DescribeImageReplicationStatus |
Ecr.DescribeImageScanFindings |
ecr:DescribeImageScanFindings |
Ecr.DescribeImageSigningStatus |
ecr:DescribeImageSigningStatus |
Ecr.DescribeImages |
ecr:DescribeImages |
Ecr.DescribePullThroughCacheRules |
ecr:DescribePullThroughCacheRules |
Ecr.DescribeRegistry |
ecr:DescribeRegistry |
Ecr.DescribeRepositories |
ecr:DescribeRepositories |
Ecr.DescribeRepositoryCreationTemplate |
ecr:DescribeRepositoryCreationTemplate |
Ecr.DescribeRepositoryCreationTemplates |
ecr:DescribeRepositoryCreationTemplates |
Ecr.GetAccountSetting |
ecr:GetAccountSetting |
Ecr.GetAuthorizationToken |
ecr:GetAuthorizationToken |
Ecr.GetDownloadUrlForLayer |
ecr:GetDownloadUrlForLayer |
Ecr.GetImageCopyStatus |
ecr:GetImageCopyStatus |
Ecr.GetLifecyclePolicy |
ecr:GetLifecyclePolicy |
Ecr.GetLifecyclePolicyPreview |
ecr:GetLifecyclePolicyPreview |
Ecr.GetRegistryPolicy |
ecr:GetRegistryPolicy |
Ecr.GetRegistryScanningConfiguration |
ecr:GetRegistryScanningConfiguration |
Ecr.GetRepositoryPolicy |
ecr:GetRepositoryPolicy |
Ecr.GetSigningConfiguration |
ecr:GetSigningConfiguration |
Ecr.InitiateLayerUpload |
ecr:InitiateLayerUpload |
Ecr.ListImages |
ecr:ListImages |
Ecr.ListPullTimeUpdateExclusions |
ecr:ListPullTimeUpdateExclusions |
Ecr.ListTagsForResource |
ecr:ListTagsForResource |
Ecr.PutAccountSetting |
ecr:PutAccountSetting |
Ecr.PutImage |
ecr:PutImage |
Ecr.PutImageScanningConfiguration |
ecr:PutImageScanningConfiguration |
Ecr.PutImageTagMutability |
ecr:PutImageTagMutability |
Ecr.PutLifecyclePolicy |
ecr:PutLifecyclePolicy |
Ecr.PutRegistryPolicy |
ecr:PutRegistryPolicy |
Ecr.PutRegistryScanningConfiguration |
ecr:PutRegistryScanningConfiguration |
Ecr.PutReplicationConfiguration |
ecr:PutReplicationConfiguration |
Ecr.PutSigningConfiguration |
ecr:PutSigningConfiguration |
Ecr.RegisterPullTimeUpdateExclusion |
ecr:RegisterPullTimeUpdateExclusion |
Ecr.ReplicateImage |
ecr:ReplicateImage |
Ecr.SetRepositoryPolicy |
ecr:SetRepositoryPolicy |
Ecr.StartImageScan |
ecr:StartImageScan |
Ecr.StartLifecyclePolicyPreview |
ecr:StartLifecyclePolicyPreview |
Ecr.TagResource |
ecr:TagResource |
Ecr.UntagResource |
ecr:UntagResource |
Ecr.UpdateImageStorageClass |
ecr:UpdateImageStorageClass |
Ecr.UpdatePullThroughCacheRule |
ecr:UpdatePullThroughCacheRule |
Ecr.UpdateRepositoryCreationTemplate |
ecr:UpdateRepositoryCreationTemplate |
Ecr.UploadLayerPart |
ecr:UploadLayerPart |
Ecr.ValidatePullThroughCacheRule |
ecr:ValidatePullThroughCacheRule |
Events¶
| Name | Action |
|---|---|
Events.ActivateEventSource |
events:ActivateEventSource |
Events.AllowVendedLogDeliveryForResource |
events:AllowVendedLogDeliveryForResource |
Events.CancelReplay |
events:CancelReplay |
Events.CreateApiDestination |
events:CreateApiDestination |
Events.CreateArchive |
events:CreateArchive |
Events.CreateConnection |
events:CreateConnection |
Events.CreateEndpoint |
events:CreateEndpoint |
Events.CreateEventBus |
events:CreateEventBus |
Events.CreatePartnerEventSource |
events:CreatePartnerEventSource |
Events.DeactivateEventSource |
events:DeactivateEventSource |
Events.DeauthorizeConnection |
events:DeauthorizeConnection |
Events.DeleteApiDestination |
events:DeleteApiDestination |
Events.DeleteArchive |
events:DeleteArchive |
Events.DeleteConnection |
events:DeleteConnection |
Events.DeleteEndpoint |
events:DeleteEndpoint |
Events.DeleteEventBus |
events:DeleteEventBus |
Events.DeletePartnerEventSource |
events:DeletePartnerEventSource |
Events.DeleteRule |
events:DeleteRule |
Events.DescribeApiDestination |
events:DescribeApiDestination |
Events.DescribeArchive |
events:DescribeArchive |
Events.DescribeConnection |
events:DescribeConnection |
Events.DescribeEndpoint |
events:DescribeEndpoint |
Events.DescribeEventBus |
events:DescribeEventBus |
Events.DescribeEventSource |
events:DescribeEventSource |
Events.DescribePartnerEventSource |
events:DescribePartnerEventSource |
Events.DescribeReplay |
events:DescribeReplay |
Events.DescribeRule |
events:DescribeRule |
Events.DisableRule |
events:DisableRule |
Events.EnableRule |
events:EnableRule |
Events.InvokeApiDestination |
events:InvokeApiDestination |
Events.ListApiDestinations |
events:ListApiDestinations |
Events.ListArchives |
events:ListArchives |
Events.ListConnections |
events:ListConnections |
Events.ListEndpoints |
events:ListEndpoints |
Events.ListEventBuses |
events:ListEventBuses |
Events.ListEventSources |
events:ListEventSources |
Events.ListPartnerEventSourceAccounts |
events:ListPartnerEventSourceAccounts |
Events.ListPartnerEventSources |
events:ListPartnerEventSources |
Events.ListReplays |
events:ListReplays |
Events.ListRuleNamesByTarget |
events:ListRuleNamesByTarget |
Events.ListRules |
events:ListRules |
Events.ListTagsForResource |
events:ListTagsForResource |
Events.ListTargetsByRule |
events:ListTargetsByRule |
Events.PutEvents |
events:PutEvents |
Events.PutPartnerEvents |
events:PutPartnerEvents |
Events.PutPermission |
events:PutPermission |
Events.PutRule |
events:PutRule |
Events.PutTargets |
events:PutTargets |
Events.RemovePermission |
events:RemovePermission |
Events.RemoveTargets |
events:RemoveTargets |
Events.RetrieveConnectionCredentials |
events:RetrieveConnectionCredentials |
Events.StartReplay |
events:StartReplay |
Events.TagResource |
events:TagResource |
Events.TestEventPattern |
events:TestEventPattern |
Events.UntagResource |
events:UntagResource |
Events.UpdateApiDestination |
events:UpdateApiDestination |
Events.UpdateArchive |
events:UpdateArchive |
Events.UpdateConnection |
events:UpdateConnection |
Events.UpdateEndpoint |
events:UpdateEndpoint |
Events.UpdateEventBus |
events:UpdateEventBus |
Kinesis¶
| Name | Action |
|---|---|
Kinesis.AddTagsToStream |
kinesis:AddTagsToStream |
Kinesis.CreateStream |
kinesis:CreateStream |
Kinesis.DecreaseStreamRetentionPeriod |
kinesis:DecreaseStreamRetentionPeriod |
Kinesis.DeleteResourcePolicy |
kinesis:DeleteResourcePolicy |
Kinesis.DeleteStream |
kinesis:DeleteStream |
Kinesis.DeregisterStreamConsumer |
kinesis:DeregisterStreamConsumer |
Kinesis.DescribeAccountSettings |
kinesis:DescribeAccountSettings |
Kinesis.DescribeLimits |
kinesis:DescribeLimits |
Kinesis.DescribeStream |
kinesis:DescribeStream |
Kinesis.DescribeStreamConsumer |
kinesis:DescribeStreamConsumer |
Kinesis.DescribeStreamSummary |
kinesis:DescribeStreamSummary |
Kinesis.DisableEnhancedMonitoring |
kinesis:DisableEnhancedMonitoring |
Kinesis.EnableEnhancedMonitoring |
kinesis:EnableEnhancedMonitoring |
Kinesis.GetRecords |
kinesis:GetRecords |
Kinesis.GetResourcePolicy |
kinesis:GetResourcePolicy |
Kinesis.GetShardIterator |
kinesis:GetShardIterator |
Kinesis.IncreaseStreamRetentionPeriod |
kinesis:IncreaseStreamRetentionPeriod |
Kinesis.InjectApiError |
kinesis:InjectApiError |
Kinesis.ListShards |
kinesis:ListShards |
Kinesis.ListStreamConsumers |
kinesis:ListStreamConsumers |
Kinesis.ListStreams |
kinesis:ListStreams |
Kinesis.ListTagsForResource |
kinesis:ListTagsForResource |
Kinesis.ListTagsForStream |
kinesis:ListTagsForStream |
Kinesis.MergeShards |
kinesis:MergeShards |
Kinesis.PutRecord |
kinesis:PutRecord |
Kinesis.PutRecords |
kinesis:PutRecords |
Kinesis.PutResourcePolicy |
kinesis:PutResourcePolicy |
Kinesis.RegisterStreamConsumer |
kinesis:RegisterStreamConsumer |
Kinesis.RemoveTagsFromStream |
kinesis:RemoveTagsFromStream |
Kinesis.SplitShard |
kinesis:SplitShard |
Kinesis.StartStreamEncryption |
kinesis:StartStreamEncryption |
Kinesis.StopStreamEncryption |
kinesis:StopStreamEncryption |
Kinesis.SubscribeToShard |
kinesis:SubscribeToShard |
Kinesis.TagResource |
kinesis:TagResource |
Kinesis.UntagResource |
kinesis:UntagResource |
Kinesis.UpdateAccountSettings |
kinesis:UpdateAccountSettings |
Kinesis.UpdateMaxRecordSize |
kinesis:UpdateMaxRecordSize |
Kinesis.UpdateShardCount |
kinesis:UpdateShardCount |
Kinesis.UpdateStreamMode |
kinesis:UpdateStreamMode |
Kinesis.UpdateStreamWarmThroughput |
kinesis:UpdateStreamWarmThroughput |
Kms¶
| Name | Action |
|---|---|
Kms.CancelKeyDeletion |
kms:CancelKeyDeletion |
Kms.ConnectCustomKeyStore |
kms:ConnectCustomKeyStore |
Kms.CreateAlias |
kms:CreateAlias |
Kms.CreateCustomKeyStore |
kms:CreateCustomKeyStore |
Kms.CreateGrant |
kms:CreateGrant |
Kms.CreateKey |
kms:CreateKey |
Kms.Decrypt |
kms:Decrypt |
Kms.DeleteAlias |
kms:DeleteAlias |
Kms.DeleteCustomKeyStore |
kms:DeleteCustomKeyStore |
Kms.DeleteImportedKeyMaterial |
kms:DeleteImportedKeyMaterial |
Kms.DeriveSharedSecret |
kms:DeriveSharedSecret |
Kms.DescribeCustomKeyStores |
kms:DescribeCustomKeyStores |
Kms.DescribeKey |
kms:DescribeKey |
Kms.DisableKey |
kms:DisableKey |
Kms.DisableKeyRotation |
kms:DisableKeyRotation |
Kms.DisconnectCustomKeyStore |
kms:DisconnectCustomKeyStore |
Kms.EnableKey |
kms:EnableKey |
Kms.EnableKeyRotation |
kms:EnableKeyRotation |
Kms.Encrypt |
kms:Encrypt |
Kms.GenerateDataKey |
kms:GenerateDataKey |
Kms.GenerateDataKeyPair |
kms:GenerateDataKeyPair |
Kms.GenerateDataKeyPairWithoutPlaintext |
kms:GenerateDataKeyPairWithoutPlaintext |
Kms.GenerateDataKeyWithoutPlaintext |
kms:GenerateDataKeyWithoutPlaintext |
Kms.GenerateMac |
kms:GenerateMac |
Kms.GenerateRandom |
kms:GenerateRandom |
Kms.GetKeyLastUsage |
kms:GetKeyLastUsage |
Kms.GetKeyPolicy |
kms:GetKeyPolicy |
Kms.GetKeyRotationStatus |
kms:GetKeyRotationStatus |
Kms.GetParametersForImport |
kms:GetParametersForImport |
Kms.GetPublicKey |
kms:GetPublicKey |
Kms.ImportKeyMaterial |
kms:ImportKeyMaterial |
Kms.ListAliases |
kms:ListAliases |
Kms.ListGrants |
kms:ListGrants |
Kms.ListKeyPolicies |
kms:ListKeyPolicies |
Kms.ListKeyRotations |
kms:ListKeyRotations |
Kms.ListKeys |
kms:ListKeys |
Kms.ListResourceTags |
kms:ListResourceTags |
Kms.ListRetirableGrants |
kms:ListRetirableGrants |
Kms.PutKeyPolicy |
kms:PutKeyPolicy |
Kms.ReEncrypt |
kms:ReEncrypt |
Kms.ReEncryptFrom |
kms:ReEncryptFrom |
Kms.ReEncryptTo |
kms:ReEncryptTo |
Kms.ReplicateKey |
kms:ReplicateKey |
Kms.RetireGrant |
kms:RetireGrant |
Kms.RevokeGrant |
kms:RevokeGrant |
Kms.RotateKeyOnDemand |
kms:RotateKeyOnDemand |
Kms.ScheduleKeyDeletion |
kms:ScheduleKeyDeletion |
Kms.Sign |
kms:Sign |
Kms.SynchronizeMultiRegionKey |
kms:SynchronizeMultiRegionKey |
Kms.TagResource |
kms:TagResource |
Kms.UntagResource |
kms:UntagResource |
Kms.UpdateAlias |
kms:UpdateAlias |
Kms.UpdateCustomKeyStore |
kms:UpdateCustomKeyStore |
Kms.UpdateKeyDescription |
kms:UpdateKeyDescription |
Kms.UpdatePrimaryRegion |
kms:UpdatePrimaryRegion |
Kms.Verify |
kms:Verify |
Kms.VerifyMac |
kms:VerifyMac |
Lambda¶
| Name | Action |
|---|---|
Lambda.AddLayerVersionPermission |
lambda:AddLayerVersionPermission |
Lambda.AddPermission |
lambda:AddPermission |
Lambda.CheckpointDurableExecution |
lambda:CheckpointDurableExecution |
Lambda.CreateAlias |
lambda:CreateAlias |
Lambda.CreateCapacityProvider |
lambda:CreateCapacityProvider |
Lambda.CreateCodeSigningConfig |
lambda:CreateCodeSigningConfig |
Lambda.CreateEventSourceMapping |
lambda:CreateEventSourceMapping |
Lambda.CreateFunction |
lambda:CreateFunction |
Lambda.CreateFunctionUrlConfig |
lambda:CreateFunctionUrlConfig |
Lambda.DeleteAlias |
lambda:DeleteAlias |
Lambda.DeleteCapacityProvider |
lambda:DeleteCapacityProvider |
Lambda.DeleteCodeSigningConfig |
lambda:DeleteCodeSigningConfig |
Lambda.DeleteEventSourceMapping |
lambda:DeleteEventSourceMapping |
Lambda.DeleteFunction |
lambda:DeleteFunction |
Lambda.DeleteFunctionCodeSigningConfig |
lambda:DeleteFunctionCodeSigningConfig |
Lambda.DeleteFunctionConcurrency |
lambda:DeleteFunctionConcurrency |
Lambda.DeleteFunctionEventInvokeConfig |
lambda:DeleteFunctionEventInvokeConfig |
Lambda.DeleteFunctionUrlConfig |
lambda:DeleteFunctionUrlConfig |
Lambda.DeleteLayerVersion |
lambda:DeleteLayerVersion |
Lambda.DeleteProvisionedConcurrencyConfig |
lambda:DeleteProvisionedConcurrencyConfig |
Lambda.DisableReplication |
lambda:DisableReplication |
Lambda.EnableReplication |
lambda:EnableReplication |
Lambda.GetAccountSettings |
lambda:GetAccountSettings |
Lambda.GetAlias |
lambda:GetAlias |
Lambda.GetCapacityProvider |
lambda:GetCapacityProvider |
Lambda.GetCodeSigningConfig |
lambda:GetCodeSigningConfig |
Lambda.GetDurableExecution |
lambda:GetDurableExecution |
Lambda.GetDurableExecutionHistory |
lambda:GetDurableExecutionHistory |
Lambda.GetDurableExecutionState |
lambda:GetDurableExecutionState |
Lambda.GetEventSourceMapping |
lambda:GetEventSourceMapping |
Lambda.GetFunction |
lambda:GetFunction |
Lambda.GetFunctionCodeSigningConfig |
lambda:GetFunctionCodeSigningConfig |
Lambda.GetFunctionConcurrency |
lambda:GetFunctionConcurrency |
Lambda.GetFunctionConfiguration |
lambda:GetFunctionConfiguration |
Lambda.GetFunctionEventInvokeConfig |
lambda:GetFunctionEventInvokeConfig |
Lambda.GetFunctionRecursionConfig |
lambda:GetFunctionRecursionConfig |
Lambda.GetFunctionScalingConfig |
lambda:GetFunctionScalingConfig |
Lambda.GetFunctionUrlConfig |
lambda:GetFunctionUrlConfig |
Lambda.GetLayerVersion |
lambda:GetLayerVersion |
Lambda.GetLayerVersionByArn |
lambda:GetLayerVersionByArn |
Lambda.GetLayerVersionPolicy |
lambda:GetLayerVersionPolicy |
Lambda.GetPolicy |
lambda:GetPolicy |
Lambda.GetProvisionedConcurrencyConfig |
lambda:GetProvisionedConcurrencyConfig |
Lambda.GetRuntimeManagementConfig |
lambda:GetRuntimeManagementConfig |
Lambda.InvokeAsync |
lambda:InvokeAsync |
Lambda.InvokeFunction |
lambda:InvokeFunction |
Lambda.InvokeFunctionUrl |
lambda:InvokeFunctionUrl |
Lambda.ListAliases |
lambda:ListAliases |
Lambda.ListCapacityProviders |
lambda:ListCapacityProviders |
Lambda.ListCodeSigningConfigs |
lambda:ListCodeSigningConfigs |
Lambda.ListDurableExecutionsByFunction |
lambda:ListDurableExecutionsByFunction |
Lambda.ListEventSourceMappings |
lambda:ListEventSourceMappings |
Lambda.ListFunctionEventInvokeConfigs |
lambda:ListFunctionEventInvokeConfigs |
Lambda.ListFunctionUrlConfigs |
lambda:ListFunctionUrlConfigs |
Lambda.ListFunctionVersionsByCapacityProvider |
lambda:ListFunctionVersionsByCapacityProvider |
Lambda.ListFunctions |
lambda:ListFunctions |
Lambda.ListFunctionsByCodeSigningConfig |
lambda:ListFunctionsByCodeSigningConfig |
Lambda.ListLayerVersions |
lambda:ListLayerVersions |
Lambda.ListLayers |
lambda:ListLayers |
Lambda.ListProvisionedConcurrencyConfigs |
lambda:ListProvisionedConcurrencyConfigs |
Lambda.ListTags |
lambda:ListTags |
Lambda.ListVersionsByFunction |
lambda:ListVersionsByFunction |
Lambda.PassCapacityProvider |
lambda:PassCapacityProvider |
Lambda.PublishLayerVersion |
lambda:PublishLayerVersion |
Lambda.PublishVersion |
lambda:PublishVersion |
Lambda.PutFunctionCodeSigningConfig |
lambda:PutFunctionCodeSigningConfig |
Lambda.PutFunctionConcurrency |
lambda:PutFunctionConcurrency |
Lambda.PutFunctionEventInvokeConfig |
lambda:PutFunctionEventInvokeConfig |
Lambda.PutFunctionRecursionConfig |
lambda:PutFunctionRecursionConfig |
Lambda.PutFunctionScalingConfig |
lambda:PutFunctionScalingConfig |
Lambda.PutProvisionedConcurrencyConfig |
lambda:PutProvisionedConcurrencyConfig |
Lambda.PutRuntimeManagementConfig |
lambda:PutRuntimeManagementConfig |
Lambda.RemoveLayerVersionPermission |
lambda:RemoveLayerVersionPermission |
Lambda.RemovePermission |
lambda:RemovePermission |
Lambda.SendDurableExecutionCallbackFailure |
lambda:SendDurableExecutionCallbackFailure |
Lambda.SendDurableExecutionCallbackHeartbeat |
lambda:SendDurableExecutionCallbackHeartbeat |
Lambda.SendDurableExecutionCallbackSuccess |
lambda:SendDurableExecutionCallbackSuccess |
Lambda.StopDurableExecution |
lambda:StopDurableExecution |
Lambda.TagResource |
lambda:TagResource |
Lambda.UntagResource |
lambda:UntagResource |
Lambda.UpdateAlias |
lambda:UpdateAlias |
Lambda.UpdateCapacityProvider |
lambda:UpdateCapacityProvider |
Lambda.UpdateCodeSigningConfig |
lambda:UpdateCodeSigningConfig |
Lambda.UpdateEventSourceMapping |
lambda:UpdateEventSourceMapping |
Lambda.UpdateFunctionCode |
lambda:UpdateFunctionCode |
Lambda.UpdateFunctionCodeSigningConfig |
lambda:UpdateFunctionCodeSigningConfig |
Lambda.UpdateFunctionConfiguration |
lambda:UpdateFunctionConfiguration |
Lambda.UpdateFunctionEventInvokeConfig |
lambda:UpdateFunctionEventInvokeConfig |
Lambda.UpdateFunctionUrlConfig |
lambda:UpdateFunctionUrlConfig |
Logs¶
| Name | Action |
|---|---|
Logs.AssociateKmsKey |
logs:AssociateKmsKey |
Logs.AssociateSourceToS3TableIntegration |
logs:AssociateSourceToS3TableIntegration |
Logs.CallWithBearerToken |
logs:CallWithBearerToken |
Logs.CancelExportTask |
logs:CancelExportTask |
Logs.CancelImportTask |
logs:CancelImportTask |
Logs.CreateDelivery |
logs:CreateDelivery |
Logs.CreateExportTask |
logs:CreateExportTask |
Logs.CreateImportTask |
logs:CreateImportTask |
Logs.CreateLogAnomalyDetector |
logs:CreateLogAnomalyDetector |
Logs.CreateLogDelivery |
logs:CreateLogDelivery |
Logs.CreateLogGroup |
logs:CreateLogGroup |
Logs.CreateLogStream |
logs:CreateLogStream |
Logs.CreateLookupTable |
logs:CreateLookupTable |
Logs.CreateScheduledQuery |
logs:CreateScheduledQuery |
Logs.DeleteAccountPolicy |
logs:DeleteAccountPolicy |
Logs.DeleteDataProtectionPolicy |
logs:DeleteDataProtectionPolicy |
Logs.DeleteDelivery |
logs:DeleteDelivery |
Logs.DeleteDeliveryDestination |
logs:DeleteDeliveryDestination |
Logs.DeleteDeliveryDestinationPolicy |
logs:DeleteDeliveryDestinationPolicy |
Logs.DeleteDeliverySource |
logs:DeleteDeliverySource |
Logs.DeleteDestination |
logs:DeleteDestination |
Logs.DeleteIndexPolicy |
logs:DeleteIndexPolicy |
Logs.DeleteIntegration |
logs:DeleteIntegration |
Logs.DeleteLogAnomalyDetector |
logs:DeleteLogAnomalyDetector |
Logs.DeleteLogDelivery |
logs:DeleteLogDelivery |
Logs.DeleteLogGroup |
logs:DeleteLogGroup |
Logs.DeleteLogStream |
logs:DeleteLogStream |
Logs.DeleteLookupTable |
logs:DeleteLookupTable |
Logs.DeleteMetricFilter |
logs:DeleteMetricFilter |
Logs.DeletePipelineRule |
logs:DeletePipelineRule |
Logs.DeleteQueryDefinition |
logs:DeleteQueryDefinition |
Logs.DeleteResourcePolicy |
logs:DeleteResourcePolicy |
Logs.DeleteRetentionPolicy |
logs:DeleteRetentionPolicy |
Logs.DeleteScheduledQuery |
logs:DeleteScheduledQuery |
Logs.DeleteSubscriptionFilter |
logs:DeleteSubscriptionFilter |
Logs.DeleteTransformer |
logs:DeleteTransformer |
Logs.DescribeAccountPolicies |
logs:DescribeAccountPolicies |
Logs.DescribeConfigurationTemplates |
logs:DescribeConfigurationTemplates |
Logs.DescribeDeliveries |
logs:DescribeDeliveries |
Logs.DescribeDeliveryDestinations |
logs:DescribeDeliveryDestinations |
Logs.DescribeDeliverySources |
logs:DescribeDeliverySources |
Logs.DescribeDestinations |
logs:DescribeDestinations |
Logs.DescribeExportTasks |
logs:DescribeExportTasks |
Logs.DescribeFieldIndexes |
logs:DescribeFieldIndexes |
Logs.DescribeImportTaskBatches |
logs:DescribeImportTaskBatches |
Logs.DescribeImportTasks |
logs:DescribeImportTasks |
Logs.DescribeIndexPolicies |
logs:DescribeIndexPolicies |
Logs.DescribeLogGroups |
logs:DescribeLogGroups |
Logs.DescribeLogStreams |
logs:DescribeLogStreams |
Logs.DescribeLookupTables |
logs:DescribeLookupTables |
Logs.DescribeMetricFilters |
logs:DescribeMetricFilters |
Logs.DescribeQueries |
logs:DescribeQueries |
Logs.DescribeQueryDefinitions |
logs:DescribeQueryDefinitions |
Logs.DescribeResourcePolicies |
logs:DescribeResourcePolicies |
Logs.DescribeSubscriptionFilters |
logs:DescribeSubscriptionFilters |
Logs.DisassociateKmsKey |
logs:DisassociateKmsKey |
Logs.DisassociateSourceFromS3TableIntegration |
logs:DisassociateSourceFromS3TableIntegration |
Logs.FilterLogEvents |
logs:FilterLogEvents |
Logs.GetDataProtectionPolicy |
logs:GetDataProtectionPolicy |
Logs.GetDelivery |
logs:GetDelivery |
Logs.GetDeliveryDestination |
logs:GetDeliveryDestination |
Logs.GetDeliveryDestinationPolicy |
logs:GetDeliveryDestinationPolicy |
Logs.GetDeliverySource |
logs:GetDeliverySource |
Logs.GetIntegration |
logs:GetIntegration |
Logs.GetLogAnomalyDetector |
logs:GetLogAnomalyDetector |
Logs.GetLogDelivery |
logs:GetLogDelivery |
Logs.GetLogEvents |
logs:GetLogEvents |
Logs.GetLogFields |
logs:GetLogFields |
Logs.GetLogGroupFields |
logs:GetLogGroupFields |
Logs.GetLogRecord |
logs:GetLogRecord |
Logs.GetLookupTable |
logs:GetLookupTable |
Logs.GetQueryResults |
logs:GetQueryResults |
Logs.GetScheduledQuery |
logs:GetScheduledQuery |
Logs.GetScheduledQueryHistory |
logs:GetScheduledQueryHistory |
Logs.GetTransformer |
logs:GetTransformer |
Logs.IntegrateWithS3Table |
logs:IntegrateWithS3Table |
Logs.Link |
logs:Link |
Logs.ListAggregateLogGroupSummaries |
logs:ListAggregateLogGroupSummaries |
Logs.ListAnomalies |
logs:ListAnomalies |
Logs.ListEntitiesForLogGroup |
logs:ListEntitiesForLogGroup |
Logs.ListIntegrations |
logs:ListIntegrations |
Logs.ListLogAnomalyDetectors |
logs:ListLogAnomalyDetectors |
Logs.ListLogDeliveries |
logs:ListLogDeliveries |
Logs.ListLogGroups |
logs:ListLogGroups |
Logs.ListLogGroupsForEntity |
logs:ListLogGroupsForEntity |
Logs.ListLogGroupsForQuery |
logs:ListLogGroupsForQuery |
Logs.ListScheduledQueries |
logs:ListScheduledQueries |
Logs.ListSourcesForS3TableIntegration |
logs:ListSourcesForS3TableIntegration |
Logs.ListTagsForResource |
logs:ListTagsForResource |
Logs.ListTagsLogGroup |
logs:ListTagsLogGroup |
Logs.ProcessWithPipeline |
logs:ProcessWithPipeline |
Logs.PutAccountPolicy |
logs:PutAccountPolicy |
Logs.PutBearerTokenAuthentication |
logs:PutBearerTokenAuthentication |
Logs.PutDataProtectionPolicy |
logs:PutDataProtectionPolicy |
Logs.PutDeliveryDestination |
logs:PutDeliveryDestination |
Logs.PutDeliveryDestinationPolicy |
logs:PutDeliveryDestinationPolicy |
Logs.PutDeliverySource |
logs:PutDeliverySource |
Logs.PutDestination |
logs:PutDestination |
Logs.PutDestinationPolicy |
logs:PutDestinationPolicy |
Logs.PutIndexPolicy |
logs:PutIndexPolicy |
Logs.PutIntegration |
logs:PutIntegration |
Logs.PutLogEvents |
logs:PutLogEvents |
Logs.PutLogGroupDeletionProtection |
logs:PutLogGroupDeletionProtection |
Logs.PutMetricFilter |
logs:PutMetricFilter |
Logs.PutPipelineRule |
logs:PutPipelineRule |
Logs.PutQueryDefinition |
logs:PutQueryDefinition |
Logs.PutResourcePolicy |
logs:PutResourcePolicy |
Logs.PutRetentionPolicy |
logs:PutRetentionPolicy |
Logs.PutSubscriptionFilter |
logs:PutSubscriptionFilter |
Logs.PutTransformer |
logs:PutTransformer |
Logs.StartLiveTail |
logs:StartLiveTail |
Logs.StartQuery |
logs:StartQuery |
Logs.StopLiveTail |
logs:StopLiveTail |
Logs.StopQuery |
logs:StopQuery |
Logs.TagLogGroup |
logs:TagLogGroup |
Logs.TagResource |
logs:TagResource |
Logs.TestMetricFilter |
logs:TestMetricFilter |
Logs.TestTransformer |
logs:TestTransformer |
Logs.Unmask |
logs:Unmask |
Logs.UntagLogGroup |
logs:UntagLogGroup |
Logs.UntagResource |
logs:UntagResource |
Logs.UpdateAnomaly |
logs:UpdateAnomaly |
Logs.UpdateDeliveryConfiguration |
logs:UpdateDeliveryConfiguration |
Logs.UpdateLogAnomalyDetector |
logs:UpdateLogAnomalyDetector |
Logs.UpdateLogDelivery |
logs:UpdateLogDelivery |
Logs.UpdateLookupTable |
logs:UpdateLookupTable |
Logs.UpdateScheduledQuery |
logs:UpdateScheduledQuery |
S3¶
| Name | Action |
|---|---|
S3.AbortMultipartUpload |
s3:AbortMultipartUpload |
S3.AssociateAccessGrantsIdentityCenter |
s3:AssociateAccessGrantsIdentityCenter |
S3.BypassGovernanceRetention |
s3:BypassGovernanceRetention |
S3.CreateAccessGrant |
s3:CreateAccessGrant |
S3.CreateAccessGrantsInstance |
s3:CreateAccessGrantsInstance |
S3.CreateAccessGrantsLocation |
s3:CreateAccessGrantsLocation |
S3.CreateAccessPoint |
s3:CreateAccessPoint |
S3.CreateAccessPointForObjectLambda |
s3:CreateAccessPointForObjectLambda |
S3.CreateBucket |
s3:CreateBucket |
S3.CreateBucketMetadataTableConfiguration |
s3:CreateBucketMetadataTableConfiguration |
S3.CreateJob |
s3:CreateJob |
S3.CreateMultiRegionAccessPoint |
s3:CreateMultiRegionAccessPoint |
S3.CreateStorageLensGroup |
s3:CreateStorageLensGroup |
S3.DeleteAccessGrant |
s3:DeleteAccessGrant |
S3.DeleteAccessGrantsInstance |
s3:DeleteAccessGrantsInstance |
S3.DeleteAccessGrantsInstanceResourcePolicy |
s3:DeleteAccessGrantsInstanceResourcePolicy |
S3.DeleteAccessGrantsLocation |
s3:DeleteAccessGrantsLocation |
S3.DeleteAccessPoint |
s3:DeleteAccessPoint |
S3.DeleteAccessPointForObjectLambda |
s3:DeleteAccessPointForObjectLambda |
S3.DeleteAccessPointPolicy |
s3:DeleteAccessPointPolicy |
S3.DeleteAccessPointPolicyForObjectLambda |
s3:DeleteAccessPointPolicyForObjectLambda |
S3.DeleteBucket |
s3:DeleteBucket |
S3.DeleteBucketMetadataTableConfiguration |
s3:DeleteBucketMetadataTableConfiguration |
S3.DeleteBucketOwnershipControls |
s3:DeleteBucketOwnershipControls |
S3.DeleteBucketPolicy |
s3:DeleteBucketPolicy |
S3.DeleteBucketWebsite |
s3:DeleteBucketWebsite |
S3.DeleteJobTagging |
s3:DeleteJobTagging |
S3.DeleteMultiRegionAccessPoint |
s3:DeleteMultiRegionAccessPoint |
S3.DeleteObject |
s3:DeleteObject |
S3.DeleteObjectTagging |
s3:DeleteObjectTagging |
S3.DeleteObjectVersion |
s3:DeleteObjectVersion |
S3.DeleteObjectVersionTagging |
s3:DeleteObjectVersionTagging |
S3.DeleteStorageLensConfiguration |
s3:DeleteStorageLensConfiguration |
S3.DeleteStorageLensConfigurationTagging |
s3:DeleteStorageLensConfigurationTagging |
S3.DeleteStorageLensGroup |
s3:DeleteStorageLensGroup |
S3.DescribeJob |
s3:DescribeJob |
S3.DescribeMultiRegionAccessPointOperation |
s3:DescribeMultiRegionAccessPointOperation |
S3.DissociateAccessGrantsIdentityCenter |
s3:DissociateAccessGrantsIdentityCenter |
S3.GetAccelerateConfiguration |
s3:GetAccelerateConfiguration |
S3.GetAccessGrant |
s3:GetAccessGrant |
S3.GetAccessGrantsInstance |
s3:GetAccessGrantsInstance |
S3.GetAccessGrantsInstanceForPrefix |
s3:GetAccessGrantsInstanceForPrefix |
S3.GetAccessGrantsInstanceResourcePolicy |
s3:GetAccessGrantsInstanceResourcePolicy |
S3.GetAccessGrantsLocation |
s3:GetAccessGrantsLocation |
S3.GetAccessPoint |
s3:GetAccessPoint |
S3.GetAccessPointConfigurationForObjectLambda |
s3:GetAccessPointConfigurationForObjectLambda |
S3.GetAccessPointForObjectLambda |
s3:GetAccessPointForObjectLambda |
S3.GetAccessPointPolicy |
s3:GetAccessPointPolicy |
S3.GetAccessPointPolicyForObjectLambda |
s3:GetAccessPointPolicyForObjectLambda |
S3.GetAccessPointPolicyStatus |
s3:GetAccessPointPolicyStatus |
S3.GetAccessPointPolicyStatusForObjectLambda |
s3:GetAccessPointPolicyStatusForObjectLambda |
S3.GetAccountPublicAccessBlock |
s3:GetAccountPublicAccessBlock |
S3.GetAnalyticsConfiguration |
s3:GetAnalyticsConfiguration |
S3.GetBucketAbac |
s3:GetBucketAbac |
S3.GetBucketAcl |
s3:GetBucketAcl |
S3.GetBucketCORS |
s3:GetBucketCORS |
S3.GetBucketLocation |
s3:GetBucketLocation |
S3.GetBucketLogging |
s3:GetBucketLogging |
S3.GetBucketMetadataTableConfiguration |
s3:GetBucketMetadataTableConfiguration |
S3.GetBucketNotification |
s3:GetBucketNotification |
S3.GetBucketObjectLockConfiguration |
s3:GetBucketObjectLockConfiguration |
S3.GetBucketOwnershipControls |
s3:GetBucketOwnershipControls |
S3.GetBucketPolicy |
s3:GetBucketPolicy |
S3.GetBucketPolicyStatus |
s3:GetBucketPolicyStatus |
S3.GetBucketPublicAccessBlock |
s3:GetBucketPublicAccessBlock |
S3.GetBucketRequestPayment |
s3:GetBucketRequestPayment |
S3.GetBucketTagging |
s3:GetBucketTagging |
S3.GetBucketVersioning |
s3:GetBucketVersioning |
S3.GetBucketWebsite |
s3:GetBucketWebsite |
S3.GetDataAccess |
s3:GetDataAccess |
S3.GetEncryptionConfiguration |
s3:GetEncryptionConfiguration |
S3.GetIntelligentTieringConfiguration |
s3:GetIntelligentTieringConfiguration |
S3.GetInventoryConfiguration |
s3:GetInventoryConfiguration |
S3.GetIpConfiguration |
s3:GetIpConfiguration |
S3.GetJobTagging |
s3:GetJobTagging |
S3.GetLifecycleConfiguration |
s3:GetLifecycleConfiguration |
S3.GetMetricsConfiguration |
s3:GetMetricsConfiguration |
S3.GetMultiRegionAccessPoint |
s3:GetMultiRegionAccessPoint |
S3.GetMultiRegionAccessPointPolicy |
s3:GetMultiRegionAccessPointPolicy |
S3.GetMultiRegionAccessPointPolicyStatus |
s3:GetMultiRegionAccessPointPolicyStatus |
S3.GetMultiRegionAccessPointRoutes |
s3:GetMultiRegionAccessPointRoutes |
S3.GetObject |
s3:GetObject |
S3.GetObjectAcl |
s3:GetObjectAcl |
S3.GetObjectAttributes |
s3:GetObjectAttributes |
S3.GetObjectLegalHold |
s3:GetObjectLegalHold |
S3.GetObjectRetention |
s3:GetObjectRetention |
S3.GetObjectTagging |
s3:GetObjectTagging |
S3.GetObjectTorrent |
s3:GetObjectTorrent |
S3.GetObjectVersion |
s3:GetObjectVersion |
S3.GetObjectVersionAcl |
s3:GetObjectVersionAcl |
S3.GetObjectVersionAttributes |
s3:GetObjectVersionAttributes |
S3.GetObjectVersionForReplication |
s3:GetObjectVersionForReplication |
S3.GetObjectVersionTagging |
s3:GetObjectVersionTagging |
S3.GetObjectVersionTorrent |
s3:GetObjectVersionTorrent |
S3.GetReplicationConfiguration |
s3:GetReplicationConfiguration |
S3.GetStorageLensConfiguration |
s3:GetStorageLensConfiguration |
S3.GetStorageLensConfigurationTagging |
s3:GetStorageLensConfigurationTagging |
S3.GetStorageLensDashboard |
s3:GetStorageLensDashboard |
S3.GetStorageLensGroup |
s3:GetStorageLensGroup |
S3.HeadBucket |
s3:HeadBucket |
S3.InitiateReplication |
s3:InitiateReplication |
S3.ListAccessGrants |
s3:ListAccessGrants |
S3.ListAccessGrantsInstances |
s3:ListAccessGrantsInstances |
S3.ListAccessGrantsLocations |
s3:ListAccessGrantsLocations |
S3.ListAccessPoints |
s3:ListAccessPoints |
S3.ListAccessPointsForObjectLambda |
s3:ListAccessPointsForObjectLambda |
S3.ListAllMyBuckets |
s3:ListAllMyBuckets |
S3.ListBucket |
s3:ListBucket |
S3.ListBucketByTags |
s3:ListBucketByTags |
S3.ListBucketMultipartUploads |
s3:ListBucketMultipartUploads |
S3.ListBucketVersions |
s3:ListBucketVersions |
S3.ListCallerAccessGrants |
s3:ListCallerAccessGrants |
S3.ListJobs |
s3:ListJobs |
S3.ListMultiRegionAccessPoints |
s3:ListMultiRegionAccessPoints |
S3.ListMultipartUploadParts |
s3:ListMultipartUploadParts |
S3.ListObjects |
s3:ListObjects |
S3.ListStorageLensConfigurations |
s3:ListStorageLensConfigurations |
S3.ListStorageLensGroups |
s3:ListStorageLensGroups |
S3.ListTagsForResource |
s3:ListTagsForResource |
S3.ObjectOwnerOverrideToBucketOwner |
s3:ObjectOwnerOverrideToBucketOwner |
S3.PauseReplication |
s3:PauseReplication |
S3.PutAccelerateConfiguration |
s3:PutAccelerateConfiguration |
S3.PutAccessGrantsInstanceResourcePolicy |
s3:PutAccessGrantsInstanceResourcePolicy |
S3.PutAccessPointConfigurationForObjectLambda |
s3:PutAccessPointConfigurationForObjectLambda |
S3.PutAccessPointPolicy |
s3:PutAccessPointPolicy |
S3.PutAccessPointPolicyForObjectLambda |
s3:PutAccessPointPolicyForObjectLambda |
S3.PutAccessPointPublicAccessBlock |
s3:PutAccessPointPublicAccessBlock |
S3.PutAccountPublicAccessBlock |
s3:PutAccountPublicAccessBlock |
S3.PutAnalyticsConfiguration |
s3:PutAnalyticsConfiguration |
S3.PutBucketAbac |
s3:PutBucketAbac |
S3.PutBucketAcl |
s3:PutBucketAcl |
S3.PutBucketCORS |
s3:PutBucketCORS |
S3.PutBucketLogging |
s3:PutBucketLogging |
S3.PutBucketNotification |
s3:PutBucketNotification |
S3.PutBucketObjectLockConfiguration |
s3:PutBucketObjectLockConfiguration |
S3.PutBucketOwnershipControls |
s3:PutBucketOwnershipControls |
S3.PutBucketPolicy |
s3:PutBucketPolicy |
S3.PutBucketPublicAccessBlock |
s3:PutBucketPublicAccessBlock |
S3.PutBucketRequestPayment |
s3:PutBucketRequestPayment |
S3.PutBucketTagging |
s3:PutBucketTagging |
S3.PutBucketVersioning |
s3:PutBucketVersioning |
S3.PutBucketWebsite |
s3:PutBucketWebsite |
S3.PutEncryptionConfiguration |
s3:PutEncryptionConfiguration |
S3.PutIntelligentTieringConfiguration |
s3:PutIntelligentTieringConfiguration |
S3.PutInventoryConfiguration |
s3:PutInventoryConfiguration |
S3.PutIpConfiguration |
s3:PutIpConfiguration |
S3.PutJobTagging |
s3:PutJobTagging |
S3.PutLifecycleConfiguration |
s3:PutLifecycleConfiguration |
S3.PutMetricsConfiguration |
s3:PutMetricsConfiguration |
S3.PutMultiRegionAccessPointPolicy |
s3:PutMultiRegionAccessPointPolicy |
S3.PutObject |
s3:PutObject |
S3.PutObjectAcl |
s3:PutObjectAcl |
S3.PutObjectLegalHold |
s3:PutObjectLegalHold |
S3.PutObjectRetention |
s3:PutObjectRetention |
S3.PutObjectTagging |
s3:PutObjectTagging |
S3.PutObjectVersionAcl |
s3:PutObjectVersionAcl |
S3.PutObjectVersionTagging |
s3:PutObjectVersionTagging |
S3.PutReplicationConfiguration |
s3:PutReplicationConfiguration |
S3.PutStorageLensConfiguration |
s3:PutStorageLensConfiguration |
S3.PutStorageLensConfigurationTagging |
s3:PutStorageLensConfigurationTagging |
S3.ReplicateDelete |
s3:ReplicateDelete |
S3.ReplicateObject |
s3:ReplicateObject |
S3.ReplicateTags |
s3:ReplicateTags |
S3.RestoreObject |
s3:RestoreObject |
S3.SubmitMultiRegionAccessPointRoutes |
s3:SubmitMultiRegionAccessPointRoutes |
S3.TagResource |
s3:TagResource |
S3.UntagResource |
s3:UntagResource |
S3.UpdateAccessGrantsLocation |
s3:UpdateAccessGrantsLocation |
S3.UpdateBucketMetadataInventoryTableConfiguration |
s3:UpdateBucketMetadataInventoryTableConfiguration |
S3.UpdateBucketMetadataJournalTableConfiguration |
s3:UpdateBucketMetadataJournalTableConfiguration |
S3.UpdateJobPriority |
s3:UpdateJobPriority |
S3.UpdateJobStatus |
s3:UpdateJobStatus |
S3.UpdateObjectEncryption |
s3:UpdateObjectEncryption |
S3.UpdateStorageLensGroup |
s3:UpdateStorageLensGroup |
SecretsManager¶
| Name | Action |
|---|---|
SecretsManager.BatchGetSecretValue |
secretsmanager:BatchGetSecretValue |
SecretsManager.CancelRotateSecret |
secretsmanager:CancelRotateSecret |
SecretsManager.CreateSecret |
secretsmanager:CreateSecret |
SecretsManager.DeleteResourcePolicy |
secretsmanager:DeleteResourcePolicy |
SecretsManager.DeleteSecret |
secretsmanager:DeleteSecret |
SecretsManager.DescribeSecret |
secretsmanager:DescribeSecret |
SecretsManager.GetRandomPassword |
secretsmanager:GetRandomPassword |
SecretsManager.GetResourcePolicy |
secretsmanager:GetResourcePolicy |
SecretsManager.GetSecretValue |
secretsmanager:GetSecretValue |
SecretsManager.ListSecretVersionIds |
secretsmanager:ListSecretVersionIds |
SecretsManager.ListSecrets |
secretsmanager:ListSecrets |
SecretsManager.PutResourcePolicy |
secretsmanager:PutResourcePolicy |
SecretsManager.PutSecretValue |
secretsmanager:PutSecretValue |
SecretsManager.RemoveRegionsFromReplication |
secretsmanager:RemoveRegionsFromReplication |
SecretsManager.ReplicateSecretToRegions |
secretsmanager:ReplicateSecretToRegions |
SecretsManager.RestoreSecret |
secretsmanager:RestoreSecret |
SecretsManager.RotateSecret |
secretsmanager:RotateSecret |
SecretsManager.StopReplicationToReplica |
secretsmanager:StopReplicationToReplica |
SecretsManager.TagResource |
secretsmanager:TagResource |
SecretsManager.UntagResource |
secretsmanager:UntagResource |
SecretsManager.UpdateSecret |
secretsmanager:UpdateSecret |
SecretsManager.UpdateSecretVersionStage |
secretsmanager:UpdateSecretVersionStage |
SecretsManager.ValidateResourcePolicy |
secretsmanager:ValidateResourcePolicy |
Sns¶
| Name | Action |
|---|---|
Sns.AddPermission |
sns:AddPermission |
Sns.CheckIfPhoneNumberIsOptedOut |
sns:CheckIfPhoneNumberIsOptedOut |
Sns.ConfirmSubscription |
sns:ConfirmSubscription |
Sns.CreatePlatformApplication |
sns:CreatePlatformApplication |
Sns.CreatePlatformEndpoint |
sns:CreatePlatformEndpoint |
Sns.CreateSMSSandboxPhoneNumber |
sns:CreateSMSSandboxPhoneNumber |
Sns.CreateTopic |
sns:CreateTopic |
Sns.DeleteEndpoint |
sns:DeleteEndpoint |
Sns.DeletePlatformApplication |
sns:DeletePlatformApplication |
Sns.DeleteSMSSandboxPhoneNumber |
sns:DeleteSMSSandboxPhoneNumber |
Sns.DeleteTopic |
sns:DeleteTopic |
Sns.GetDataProtectionPolicy |
sns:GetDataProtectionPolicy |
Sns.GetEndpointAttributes |
sns:GetEndpointAttributes |
Sns.GetPlatformApplicationAttributes |
sns:GetPlatformApplicationAttributes |
Sns.GetSMSAttributes |
sns:GetSMSAttributes |
Sns.GetSMSSandboxAccountStatus |
sns:GetSMSSandboxAccountStatus |
Sns.GetSubscriptionAttributes |
sns:GetSubscriptionAttributes |
Sns.GetTopicAttributes |
sns:GetTopicAttributes |
Sns.ListEndpointsByPlatformApplication |
sns:ListEndpointsByPlatformApplication |
Sns.ListOriginationNumbers |
sns:ListOriginationNumbers |
Sns.ListPhoneNumbersOptedOut |
sns:ListPhoneNumbersOptedOut |
Sns.ListPlatformApplications |
sns:ListPlatformApplications |
Sns.ListSMSSandboxPhoneNumbers |
sns:ListSMSSandboxPhoneNumbers |
Sns.ListSubscriptions |
sns:ListSubscriptions |
Sns.ListSubscriptionsByTopic |
sns:ListSubscriptionsByTopic |
Sns.ListTagsForResource |
sns:ListTagsForResource |
Sns.ListTopics |
sns:ListTopics |
Sns.OptInPhoneNumber |
sns:OptInPhoneNumber |
Sns.Publish |
sns:Publish |
Sns.PutDataProtectionPolicy |
sns:PutDataProtectionPolicy |
Sns.RemovePermission |
sns:RemovePermission |
Sns.SetEndpointAttributes |
sns:SetEndpointAttributes |
Sns.SetPlatformApplicationAttributes |
sns:SetPlatformApplicationAttributes |
Sns.SetSMSAttributes |
sns:SetSMSAttributes |
Sns.SetSubscriptionAttributes |
sns:SetSubscriptionAttributes |
Sns.SetTopicAttributes |
sns:SetTopicAttributes |
Sns.Subscribe |
sns:Subscribe |
Sns.TagResource |
sns:TagResource |
Sns.Unsubscribe |
sns:Unsubscribe |
Sns.UntagResource |
sns:UntagResource |
Sns.VerifySMSSandboxPhoneNumber |
sns:VerifySMSSandboxPhoneNumber |
Sqs¶
| Name | Action |
|---|---|
Sqs.AddPermission |
sqs:AddPermission |
Sqs.CancelMessageMoveTask |
sqs:CancelMessageMoveTask |
Sqs.ChangeMessageVisibility |
sqs:ChangeMessageVisibility |
Sqs.ChangeMessageVisibilityBatch |
sqs:ChangeMessageVisibilityBatch |
Sqs.CreateQueue |
sqs:CreateQueue |
Sqs.DeleteMessage |
sqs:DeleteMessage |
Sqs.DeleteMessageBatch |
sqs:DeleteMessageBatch |
Sqs.DeleteQueue |
sqs:DeleteQueue |
Sqs.GetQueueAttributes |
sqs:GetQueueAttributes |
Sqs.GetQueueUrl |
sqs:GetQueueUrl |
Sqs.ListDeadLetterSourceQueues |
sqs:ListDeadLetterSourceQueues |
Sqs.ListMessageMoveTasks |
sqs:ListMessageMoveTasks |
Sqs.ListQueueTags |
sqs:ListQueueTags |
Sqs.ListQueues |
sqs:ListQueues |
Sqs.PurgeQueue |
sqs:PurgeQueue |
Sqs.ReceiveMessage |
sqs:ReceiveMessage |
Sqs.RemovePermission |
sqs:RemovePermission |
Sqs.SendMessage |
sqs:SendMessage |
Sqs.SendMessageBatch |
sqs:SendMessageBatch |
Sqs.SetQueueAttributes |
sqs:SetQueueAttributes |
Sqs.StartMessageMoveTask |
sqs:StartMessageMoveTask |
Sqs.TagQueue |
sqs:TagQueue |
Sqs.UntagQueue |
sqs:UntagQueue |
Ssm¶
| Name | Action |
|---|---|
Ssm.AddTagsToResource |
ssm:AddTagsToResource |
Ssm.AssociateOpsItemRelatedItem |
ssm:AssociateOpsItemRelatedItem |
Ssm.CancelCommand |
ssm:CancelCommand |
Ssm.CancelMaintenanceWindowExecution |
ssm:CancelMaintenanceWindowExecution |
Ssm.CreateActivation |
ssm:CreateActivation |
Ssm.CreateAssociation |
ssm:CreateAssociation |
Ssm.CreateAssociationBatch |
ssm:CreateAssociationBatch |
Ssm.CreateDocument |
ssm:CreateDocument |
Ssm.CreateMaintenanceWindow |
ssm:CreateMaintenanceWindow |
Ssm.CreateOpsItem |
ssm:CreateOpsItem |
Ssm.CreateOpsMetadata |
ssm:CreateOpsMetadata |
Ssm.CreatePatchBaseline |
ssm:CreatePatchBaseline |
Ssm.CreateResourceDataSync |
ssm:CreateResourceDataSync |
Ssm.DeleteActivation |
ssm:DeleteActivation |
Ssm.DeleteAssociation |
ssm:DeleteAssociation |
Ssm.DeleteDocument |
ssm:DeleteDocument |
Ssm.DeleteInventory |
ssm:DeleteInventory |
Ssm.DeleteMaintenanceWindow |
ssm:DeleteMaintenanceWindow |
Ssm.DeleteOpsItem |
ssm:DeleteOpsItem |
Ssm.DeleteOpsMetadata |
ssm:DeleteOpsMetadata |
Ssm.DeleteParameter |
ssm:DeleteParameter |
Ssm.DeleteParameters |
ssm:DeleteParameters |
Ssm.DeletePatchBaseline |
ssm:DeletePatchBaseline |
Ssm.DeleteResourceDataSync |
ssm:DeleteResourceDataSync |
Ssm.DeleteResourcePolicy |
ssm:DeleteResourcePolicy |
Ssm.DeregisterManagedInstance |
ssm:DeregisterManagedInstance |
Ssm.DeregisterPatchBaselineForPatchGroup |
ssm:DeregisterPatchBaselineForPatchGroup |
Ssm.DeregisterTargetFromMaintenanceWindow |
ssm:DeregisterTargetFromMaintenanceWindow |
Ssm.DeregisterTaskFromMaintenanceWindow |
ssm:DeregisterTaskFromMaintenanceWindow |
Ssm.DescribeActivations |
ssm:DescribeActivations |
Ssm.DescribeAssociation |
ssm:DescribeAssociation |
Ssm.DescribeAssociationExecutionTargets |
ssm:DescribeAssociationExecutionTargets |
Ssm.DescribeAssociationExecutions |
ssm:DescribeAssociationExecutions |
Ssm.DescribeAutomationExecutions |
ssm:DescribeAutomationExecutions |
Ssm.DescribeAutomationStepExecutions |
ssm:DescribeAutomationStepExecutions |
Ssm.DescribeAvailablePatches |
ssm:DescribeAvailablePatches |
Ssm.DescribeDocument |
ssm:DescribeDocument |
Ssm.DescribeDocumentParameters |
ssm:DescribeDocumentParameters |
Ssm.DescribeDocumentPermission |
ssm:DescribeDocumentPermission |
Ssm.DescribeEffectiveInstanceAssociations |
ssm:DescribeEffectiveInstanceAssociations |
Ssm.DescribeEffectivePatchesForPatchBaseline |
ssm:DescribeEffectivePatchesForPatchBaseline |
Ssm.DescribeInstanceAssociationsStatus |
ssm:DescribeInstanceAssociationsStatus |
Ssm.DescribeInstanceInformation |
ssm:DescribeInstanceInformation |
Ssm.DescribeInstancePatchStates |
ssm:DescribeInstancePatchStates |
Ssm.DescribeInstancePatchStatesForPatchGroup |
ssm:DescribeInstancePatchStatesForPatchGroup |
Ssm.DescribeInstancePatches |
ssm:DescribeInstancePatches |
Ssm.DescribeInstanceProperties |
ssm:DescribeInstanceProperties |
Ssm.DescribeInventoryDeletions |
ssm:DescribeInventoryDeletions |
Ssm.DescribeMaintenanceWindowExecutionTaskInvocations |
ssm:DescribeMaintenanceWindowExecutionTaskInvocations |
Ssm.DescribeMaintenanceWindowExecutionTasks |
ssm:DescribeMaintenanceWindowExecutionTasks |
Ssm.DescribeMaintenanceWindowExecutions |
ssm:DescribeMaintenanceWindowExecutions |
Ssm.DescribeMaintenanceWindowSchedule |
ssm:DescribeMaintenanceWindowSchedule |
Ssm.DescribeMaintenanceWindowTargets |
ssm:DescribeMaintenanceWindowTargets |
Ssm.DescribeMaintenanceWindowTasks |
ssm:DescribeMaintenanceWindowTasks |
Ssm.DescribeMaintenanceWindows |
ssm:DescribeMaintenanceWindows |
Ssm.DescribeMaintenanceWindowsForTarget |
ssm:DescribeMaintenanceWindowsForTarget |
Ssm.DescribeOpsItems |
ssm:DescribeOpsItems |
Ssm.DescribeParameters |
ssm:DescribeParameters |
Ssm.DescribePatchBaselines |
ssm:DescribePatchBaselines |
Ssm.DescribePatchGroupState |
ssm:DescribePatchGroupState |
Ssm.DescribePatchGroups |
ssm:DescribePatchGroups |
Ssm.DescribePatchProperties |
ssm:DescribePatchProperties |
Ssm.DescribeSessions |
ssm:DescribeSessions |
Ssm.DisassociateOpsItemRelatedItem |
ssm:DisassociateOpsItemRelatedItem |
Ssm.ExecuteAPI |
ssm:ExecuteAPI |
Ssm.GetAccessToken |
ssm:GetAccessToken |
Ssm.GetAutomationExecution |
ssm:GetAutomationExecution |
Ssm.GetCalendar |
ssm:GetCalendar |
Ssm.GetCalendarState |
ssm:GetCalendarState |
Ssm.GetCommandInvocation |
ssm:GetCommandInvocation |
Ssm.GetConnectionStatus |
ssm:GetConnectionStatus |
Ssm.GetDefaultPatchBaseline |
ssm:GetDefaultPatchBaseline |
Ssm.GetDeployablePatchSnapshotForInstance |
ssm:GetDeployablePatchSnapshotForInstance |
Ssm.GetDocument |
ssm:GetDocument |
Ssm.GetExecutionPreview |
ssm:GetExecutionPreview |
Ssm.GetInventory |
ssm:GetInventory |
Ssm.GetInventorySchema |
ssm:GetInventorySchema |
Ssm.GetMaintenanceWindow |
ssm:GetMaintenanceWindow |
Ssm.GetMaintenanceWindowExecution |
ssm:GetMaintenanceWindowExecution |
Ssm.GetMaintenanceWindowExecutionTask |
ssm:GetMaintenanceWindowExecutionTask |
Ssm.GetMaintenanceWindowExecutionTaskInvocation |
ssm:GetMaintenanceWindowExecutionTaskInvocation |
Ssm.GetMaintenanceWindowTask |
ssm:GetMaintenanceWindowTask |
Ssm.GetManifest |
ssm:GetManifest |
Ssm.GetOpsItem |
ssm:GetOpsItem |
Ssm.GetOpsMetadata |
ssm:GetOpsMetadata |
Ssm.GetOpsSummary |
ssm:GetOpsSummary |
Ssm.GetParameter |
ssm:GetParameter |
Ssm.GetParameterHistory |
ssm:GetParameterHistory |
Ssm.GetParameters |
ssm:GetParameters |
Ssm.GetParametersByPath |
ssm:GetParametersByPath |
Ssm.GetPatchBaseline |
ssm:GetPatchBaseline |
Ssm.GetPatchBaselineForPatchGroup |
ssm:GetPatchBaselineForPatchGroup |
Ssm.GetResourcePolicies |
ssm:GetResourcePolicies |
Ssm.GetServiceSetting |
ssm:GetServiceSetting |
Ssm.LabelParameterVersion |
ssm:LabelParameterVersion |
Ssm.ListAssociationVersions |
ssm:ListAssociationVersions |
Ssm.ListAssociations |
ssm:ListAssociations |
Ssm.ListCommandInvocations |
ssm:ListCommandInvocations |
Ssm.ListCommands |
ssm:ListCommands |
Ssm.ListComplianceItems |
ssm:ListComplianceItems |
Ssm.ListComplianceSummaries |
ssm:ListComplianceSummaries |
Ssm.ListDocumentMetadataHistory |
ssm:ListDocumentMetadataHistory |
Ssm.ListDocumentVersions |
ssm:ListDocumentVersions |
Ssm.ListDocuments |
ssm:ListDocuments |
Ssm.ListInstanceAssociations |
ssm:ListInstanceAssociations |
Ssm.ListInventoryEntries |
ssm:ListInventoryEntries |
Ssm.ListNodes |
ssm:ListNodes |
Ssm.ListNodesSummary |
ssm:ListNodesSummary |
Ssm.ListOpsItemEvents |
ssm:ListOpsItemEvents |
Ssm.ListOpsItemRelatedItems |
ssm:ListOpsItemRelatedItems |
Ssm.ListOpsMetadata |
ssm:ListOpsMetadata |
Ssm.ListResourceComplianceSummaries |
ssm:ListResourceComplianceSummaries |
Ssm.ListResourceDataSync |
ssm:ListResourceDataSync |
Ssm.ListTagsForResource |
ssm:ListTagsForResource |
Ssm.ModifyDocumentPermission |
ssm:ModifyDocumentPermission |
Ssm.PutCalendar |
ssm:PutCalendar |
Ssm.PutComplianceItems |
ssm:PutComplianceItems |
Ssm.PutConfigurePackageResult |
ssm:PutConfigurePackageResult |
Ssm.PutInventory |
ssm:PutInventory |
Ssm.PutParameter |
ssm:PutParameter |
Ssm.PutResourcePolicy |
ssm:PutResourcePolicy |
Ssm.RegisterDefaultPatchBaseline |
ssm:RegisterDefaultPatchBaseline |
Ssm.RegisterManagedInstance |
ssm:RegisterManagedInstance |
Ssm.RegisterPatchBaselineForPatchGroup |
ssm:RegisterPatchBaselineForPatchGroup |
Ssm.RegisterTargetWithMaintenanceWindow |
ssm:RegisterTargetWithMaintenanceWindow |
Ssm.RegisterTaskWithMaintenanceWindow |
ssm:RegisterTaskWithMaintenanceWindow |
Ssm.RemoveTagsFromResource |
ssm:RemoveTagsFromResource |
Ssm.ResetServiceSetting |
ssm:ResetServiceSetting |
Ssm.ResumeSession |
ssm:ResumeSession |
Ssm.SendAutomationSignal |
ssm:SendAutomationSignal |
Ssm.SendCommand |
ssm:SendCommand |
Ssm.StartAccessRequest |
ssm:StartAccessRequest |
Ssm.StartAssociationsOnce |
ssm:StartAssociationsOnce |
Ssm.StartAutomationExecution |
ssm:StartAutomationExecution |
Ssm.StartChangeRequestExecution |
ssm:StartChangeRequestExecution |
Ssm.StartExecutionPreview |
ssm:StartExecutionPreview |
Ssm.StartSession |
ssm:StartSession |
Ssm.StopAutomationExecution |
ssm:StopAutomationExecution |
Ssm.TerminateSession |
ssm:TerminateSession |
Ssm.UnlabelParameterVersion |
ssm:UnlabelParameterVersion |
Ssm.UpdateAssociation |
ssm:UpdateAssociation |
Ssm.UpdateAssociationStatus |
ssm:UpdateAssociationStatus |
Ssm.UpdateDocument |
ssm:UpdateDocument |
Ssm.UpdateDocumentDefaultVersion |
ssm:UpdateDocumentDefaultVersion |
Ssm.UpdateDocumentMetadata |
ssm:UpdateDocumentMetadata |
Ssm.UpdateInstanceAssociationStatus |
ssm:UpdateInstanceAssociationStatus |
Ssm.UpdateInstanceInformation |
ssm:UpdateInstanceInformation |
Ssm.UpdateMaintenanceWindow |
ssm:UpdateMaintenanceWindow |
Ssm.UpdateMaintenanceWindowTarget |
ssm:UpdateMaintenanceWindowTarget |
Ssm.UpdateMaintenanceWindowTask |
ssm:UpdateMaintenanceWindowTask |
Ssm.UpdateManagedInstanceRole |
ssm:UpdateManagedInstanceRole |
Ssm.UpdateOpsItem |
ssm:UpdateOpsItem |
Ssm.UpdateOpsMetadata |
ssm:UpdateOpsMetadata |
Ssm.UpdatePatchBaseline |
ssm:UpdatePatchBaseline |
Ssm.UpdateResourceDataSync |
ssm:UpdateResourceDataSync |
Ssm.UpdateServiceSetting |
ssm:UpdateServiceSetting |