diff --git a/data/json/AWSResourceExplorerServiceRolePolicy/v9/policy.json b/data/json/AWSResourceExplorerServiceRolePolicy/v9/policy.json new file mode 100644 index 00000000..1f7fdfb0 --- /dev/null +++ b/data/json/AWSResourceExplorerServiceRolePolicy/v9/policy.json @@ -0,0 +1,444 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "CloudTrailEventsAccess", + "Effect": "Allow", + "Action": [ + "cloudtrail:CreateServiceLinkedChannel", + "cloudtrail:GetServiceLinkedChannel" + ], + "Resource": "arn:aws:cloudtrail:*:*:channel/aws-service-channel/resource-explorer-2/*" + }, + { + "Sid": "ApiGatewayAccess", + "Effect": "Allow", + "Action": "apigateway:GET", + "Resource": [ + "arn:aws:apigateway:*::/restapis", + "arn:aws:apigateway:*::/restapis/*/deployments" + ] + }, + { + "Sid": "ResourceInventoryAccess", + "Effect": "Allow", + "Action": [ + "access-analyzer:ListAnalyzers", + "acm-pca:ListCertificateAuthorities", + "airflow:ListEnvironments", + "amplify:ListApps", + "amplify:ListBackendEnvironments", + "amplify:ListBranches", + "amplify:ListDomainAssociations", + "amplifyuibuilder:ListComponents", + "amplifyuibuilder:ListThemes", + "app-integrations:ListEventIntegrations", + "appflow:ListFlows", + "appmesh:ListMeshes", + "appmesh:ListVirtualNodes", + "appmesh:ListVirtualServices", + "apprunner:ListServices", + "apprunner:ListVpcConnectors", + "appstream:DescribeAppBlocks", + "appstream:DescribeApplications", + "appstream:DescribeFleets", + "appstream:DescribeImageBuilders", + "appstream:DescribeStacks", + "appsync:ListGraphqlApis", + "aps:ListRuleGroupsNamespaces", + "aps:ListWorkspaces", + "athena:ListDataCatalogs", + "athena:ListWorkGroups", + "auditmanager:GetAccountStatus", + "auditmanager:ListAssessments", + "autoscaling:DescribeAutoScalingGroups", + "backup:ListBackupPlans", + "backup:ListBackupVaults", + "backup:ListReportPlans", + "batch:DescribeComputeEnvironments", + "batch:DescribeJobQueues", + "batch:ListSchedulingPolicies", + "cloudformation:ListStackSets", + "cloudformation:ListStacks", + "cloudfront:ListCachePolicies", + "cloudfront:ListCloudFrontOriginAccessIdentities", + "cloudfront:ListDistributions", + "cloudfront:ListFieldLevelEncryptionConfigs", + "cloudfront:ListFieldLevelEncryptionProfiles", + "cloudfront:ListFunctions", + "cloudfront:ListOriginAccessControls", + "cloudfront:ListOriginRequestPolicies", + "cloudfront:ListRealtimeLogConfigs", + "cloudfront:ListResponseHeadersPolicies", + "cloudtrail:ListTrails", + "cloudwatch:DescribeAlarms", + "cloudwatch:DescribeInsightRules", + "cloudwatch:ListDashboards", + "cloudwatch:ListMetricStreams", + "codeartifact:ListDomains", + "codeartifact:ListRepositories", + "codebuild:ListProjects", + "codecommit:ListRepositories", + "codeguru-profiler:ListProfilingGroups", + "codeguru-reviewer:ListRepositoryAssociations", + "codepipeline:ListPipelines", + "codestar-connections:ListConnections", + "cognito-identity:ListIdentityPools", + "cognito-idp:ListUserPools", + "connect:ListInstances", + "connect:ListQuickConnects", + "connect:ListUsers", + "databrew:ListDatasets", + "databrew:ListRecipes", + "databrew:ListRulesets", + "databrew:ListSchedules", + "datasync:ListLocations", + "datasync:ListTasks", + "detective:ListGraphs", + "dms:DescribeEndpoints", + "dms:DescribeReplicationInstances", + "dms:DescribeReplicationTasks", + "ds:DescribeDirectories", + "dynamodb:ListStreams", + "dynamodb:ListTables", + "ec2:DescribeAddresses", + "ec2:DescribeCapacityReservationFleets", + "ec2:DescribeCapacityReservations", + "ec2:DescribeCarrierGateways", + "ec2:DescribeClientVpnEndpoints", + "ec2:DescribeCustomerGateways", + "ec2:DescribeDhcpOptions", + "ec2:DescribeEgressOnlyInternetGateways", + "ec2:DescribeElasticGpus", + "ec2:DescribeExportImageTasks", + "ec2:DescribeExportTasks", + "ec2:DescribeFleets", + "ec2:DescribeFlowLogs", + "ec2:DescribeFpgaImages", + "ec2:DescribeHostReservations", + "ec2:DescribeHosts", + "ec2:DescribeImages", + "ec2:DescribeImportImageTasks", + "ec2:DescribeImportSnapshotTasks", + "ec2:DescribeInstanceEventWindows", + "ec2:DescribeInstances", + "ec2:DescribeInternetGateways", + "ec2:DescribeIpamPools", + "ec2:DescribeIpamScopes", + "ec2:DescribeIpams", + "ec2:DescribeKeyPairs", + "ec2:DescribeLaunchTemplates", + "ec2:DescribeManagedPrefixLists", + "ec2:DescribeNatGateways", + "ec2:DescribeNetworkAcls", + "ec2:DescribeNetworkInsightsAccessScopeAnalyses", + "ec2:DescribeNetworkInsightsAccessScopes", + "ec2:DescribeNetworkInsightsAnalyses", + "ec2:DescribeNetworkInsightsPaths", + "ec2:DescribeNetworkInterfaces", + "ec2:DescribePlacementGroups", + "ec2:DescribePublicIpv4Pools", + "ec2:DescribeReservedInstances", + "ec2:DescribeRouteTables", + "ec2:DescribeSecurityGroupRules", + "ec2:DescribeSecurityGroups", + "ec2:DescribeSnapshots", + "ec2:DescribeSpotFleetRequests", + "ec2:DescribeSpotInstanceRequests", + "ec2:DescribeSubnets", + "ec2:DescribeTrafficMirrorFilters", + "ec2:DescribeTrafficMirrorSessions", + "ec2:DescribeTrafficMirrorTargets", + "ec2:DescribeTransitGatewayAttachments", + "ec2:DescribeTransitGatewayConnectPeers", + "ec2:DescribeTransitGatewayMulticastDomains", + "ec2:DescribeTransitGatewayPolicyTables", + "ec2:DescribeTransitGatewayRouteTableAnnouncements", + "ec2:DescribeTransitGatewayRouteTables", + "ec2:DescribeTransitGateways", + "ec2:DescribeVerifiedAccessEndpoints", + "ec2:DescribeVerifiedAccessGroups", + "ec2:DescribeVerifiedAccessInstances", + "ec2:DescribeVerifiedAccessTrustProviders", + "ec2:DescribeVolumes", + "ec2:DescribeVpcEndpointServices", + "ec2:DescribeVpcEndpoints", + "ec2:DescribeVpcPeeringConnections", + "ec2:DescribeVpcs", + "ec2:DescribeVpnConnections", + "ec2:DescribeVpnGateways", + "ec2:GetSubnetCidrReservations", + "ecr-public:DescribeRepositories", + "ecr:DescribeRepositories", + "ecs:DescribeCapacityProviders", + "ecs:DescribeServices", + "ecs:ListClusters", + "ecs:ListContainerInstances", + "ecs:ListServices", + "ecs:ListTaskDefinitions", + "ecs:ListTasks", + "eks:ListClusters", + "elasticache:DescribeCacheClusters", + "elasticache:DescribeCacheParameterGroups", + "elasticache:DescribeCacheSecurityGroups", + "elasticache:DescribeCacheSubnetGroups", + "elasticache:DescribeGlobalReplicationGroups", + "elasticache:DescribeReplicationGroups", + "elasticache:DescribeReservedCacheNodes", + "elasticache:DescribeSnapshots", + "elasticache:DescribeUserGroups", + "elasticache:DescribeUsers", + "elasticbeanstalk:DescribeApplicationVersions", + "elasticbeanstalk:DescribeApplications", + "elasticbeanstalk:DescribeEnvironments", + "elasticfilesystem:DescribeAccessPoints", + "elasticfilesystem:DescribeFileSystems", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeRules", + "elasticloadbalancing:DescribeTargetGroups", + "emr-serverless:ListApplications", + "es:ListDomainNames", + "events:ListEventBuses", + "events:ListRules", + "evidently:ListExperiments", + "evidently:ListFeatures", + "evidently:ListLaunches", + "evidently:ListProjects", + "finspace:ListEnvironments", + "firehose:ListDeliveryStreams", + "fis:ListExperimentTemplates", + "forecast:ListDatasetGroups", + "forecast:ListDatasets", + "frauddetector:GetDetectors", + "frauddetector:GetEntityTypes", + "frauddetector:GetEventTypes", + "frauddetector:GetLabels", + "frauddetector:GetOutcomes", + "frauddetector:GetVariables", + "gamelift:DescribeGameSessionQueues", + "gamelift:DescribeMatchmakingConfigurations", + "gamelift:DescribeMatchmakingRuleSets", + "gamelift:ListAliases", + "gamelift:ListBuilds", + "geo:ListPlaceIndexes", + "geo:ListTrackers", + "globalaccelerator:ListAccelerators", + "globalaccelerator:ListEndpointGroups", + "globalaccelerator:ListListeners", + "glue:GetDatabases", + "glue:GetJobs", + "glue:GetTables", + "glue:GetTriggers", + "glue:ListMLTransforms", + "greengrass:ListComponentVersions", + "greengrass:ListComponents", + "greengrass:ListGroups", + "groundstation:ListConfigs", + "guardduty:ListDetectors", + "guardduty:ListFilters", + "guardduty:ListIPSets", + "guardduty:ListThreatIntelSets", + "healthlake:ListFHIRDatastores", + "iam:ListGroups", + "iam:ListInstanceProfiles", + "iam:ListOpenIDConnectProviders", + "iam:ListPolicies", + "iam:ListRoles", + "iam:ListSAMLProviders", + "iam:ListServerCertificates", + "iam:ListUsers", + "iam:ListVirtualMFADevices", + "imagebuilder:ListComponentBuildVersions", + "imagebuilder:ListComponents", + "imagebuilder:ListContainerRecipes", + "imagebuilder:ListDistributionConfigurations", + "imagebuilder:ListImageBuildVersions", + "imagebuilder:ListImagePipelines", + "imagebuilder:ListImageRecipes", + "imagebuilder:ListImages", + "imagebuilder:ListInfrastructureConfigurations", + "iot:ListAuthorizers", + "iot:ListJobTemplates", + "iot:ListMitigationActions", + "iot:ListPolicies", + "iot:ListProvisioningTemplates", + "iot:ListRoleAliases", + "iot:ListSecurityProfiles", + "iot:ListThings", + "iot:ListTopicRuleDestinations", + "iot:ListTopicRules", + "iotanalytics:ListChannels", + "iotanalytics:ListDatasets", + "iotanalytics:ListDatastores", + "iotanalytics:ListPipelines", + "iotevents:ListAlarmModels", + "iotevents:ListDetectorModels", + "iotevents:ListInputs", + "iotsitewise:ListAssetModels", + "iotsitewise:ListAssets", + "iotsitewise:ListDashboards", + "iotsitewise:ListGateways", + "iotsitewise:ListPortals", + "iotsitewise:ListProjects", + "iottwinmaker:ListComponentTypes", + "iottwinmaker:ListEntities", + "iottwinmaker:ListScenes", + "iottwinmaker:ListWorkspaces", + "iotwireless:ListServiceProfiles", + "ivs:ListChannels", + "ivs:ListRecordingConfigurations", + "ivs:ListStreamKeys", + "kafka:ListClusters", + "kafka:ListConfigurations", + "kendra:ListIndices", + "kinesis:ListStreamConsumers", + "kinesis:ListStreams", + "kinesisanalytics:ListApplications", + "kinesisvideo:ListStreams", + "kms:ListKeys", + "lambda:ListAliases", + "lambda:ListCodeSigningConfigs", + "lambda:ListEventSourceMappings", + "lambda:ListFunctions", + "lambda:ListLayerVersions", + "lambda:ListLayers", + "lex:ListBotAliases", + "lex:ListBots", + "logs:DescribeDestinations", + "logs:DescribeLogGroups", + "logs:DescribeLogStreams", + "lookoutmetrics:ListAlerts", + "lookoutvision:ListProjects", + "macie2:ListCustomDataIdentifiers", + "macie2:ListFindingsFilters", + "mediapackage-vod:ListPackagingConfigurations", + "mediapackage-vod:ListPackagingGroups", + "mediapackage:ListChannels", + "mediapackage:ListOriginEndpoints", + "mediatailor:ListPlaybackConfigurations", + "memorydb:DescribeACLs", + "memorydb:DescribeClusters", + "memorydb:DescribeParameterGroups", + "memorydb:DescribeSubnetGroups", + "memorydb:DescribeUsers", + "mobiletargeting:GetApps", + "mobiletargeting:GetCampaigns", + "mobiletargeting:GetSegments", + "mobiletargeting:ListTemplates", + "mq:ListBrokers", + "network-firewall:ListFirewallPolicies", + "network-firewall:ListFirewalls", + "networkmanager:DescribeGlobalNetworks", + "networkmanager:GetDevices", + "networkmanager:GetLinks", + "networkmanager:ListAttachments", + "networkmanager:ListCoreNetworks", + "organizations:DescribeAccount", + "organizations:DescribeOrganization", + "organizations:ListAWSServiceAccessForOrganization", + "organizations:ListAccounts", + "organizations:ListDelegatedAdministrators", + "panorama:ListPackages", + "personalize:ListDatasetGroups", + "personalize:ListDatasets", + "personalize:ListSchemas", + "proton:ListEnvironmentAccountConnections", + "qldb:ListJournalKinesisStreamsForLedger", + "qldb:ListLedgers", + "quicksight:DescribeAccountSubscription", + "quicksight:ListDataSets", + "quicksight:ListDataSources", + "quicksight:ListTemplates", + "ram:GetResourceShares", + "rds:DescribeBlueGreenDeployments", + "rds:DescribeDBClusterEndpoints", + "rds:DescribeDBClusterParameterGroups", + "rds:DescribeDBClusterSnapshots", + "rds:DescribeDBClusters", + "rds:DescribeDBEngineVersions", + "rds:DescribeDBInstanceAutomatedBackups", + "rds:DescribeDBInstances", + "rds:DescribeDBParameterGroups", + "rds:DescribeDBProxies", + "rds:DescribeDBProxyEndpoints", + "rds:DescribeDBSecurityGroups", + "rds:DescribeDBSnapshots", + "rds:DescribeDBSubnetGroups", + "rds:DescribeEventSubscriptions", + "rds:DescribeGlobalClusters", + "rds:DescribeOptionGroups", + "rds:DescribeReservedDBInstances", + "redshift:DescribeClusterParameterGroups", + "redshift:DescribeClusterSnapshots", + "redshift:DescribeClusterSubnetGroups", + "redshift:DescribeClusters", + "redshift:DescribeEventSubscriptions", + "redshift:DescribeSnapshotCopyGrants", + "redshift:DescribeSnapshotSchedules", + "redshift:DescribeUsageLimits", + "refactor-spaces:ListApplications", + "refactor-spaces:ListEnvironments", + "refactor-spaces:ListRoutes", + "refactor-spaces:ListServices", + "rekognition:DescribeProjects", + "resiliencehub:ListApps", + "resiliencehub:ListResiliencyPolicies", + "resource-explorer-2:GetIndex", + "resource-explorer-2:ListIndexes", + "resource-explorer-2:ListViews", + "resource-groups:ListGroups", + "robomaker:ListRobotApplications", + "robomaker:ListSimulationApplications", + "route53-recovery-readiness:ListRecoveryGroups", + "route53-recovery-readiness:ListResourceSets", + "route53:ListHealthChecks", + "route53:ListHostedZones", + "route53resolver:ListFirewallDomainLists", + "route53resolver:ListFirewallRuleGroups", + "route53resolver:ListResolverEndpoints", + "route53resolver:ListResolverQueryLogConfigs", + "route53resolver:ListResolverRules", + "s3:GetBucketLocation", + "s3:ListAccessPoints", + "s3:ListAllMyBuckets", + "s3:ListBucket", + "s3:ListStorageLensConfigurations", + "sagemaker:ListDomains", + "sagemaker:ListEndpoints", + "sagemaker:ListFeatureGroups", + "sagemaker:ListImages", + "sagemaker:ListModels", + "sagemaker:ListNotebookInstances", + "sagemaker:ListPipelines", + "secretsmanager:ListSecrets", + "servicecatalog:ListApplications", + "servicecatalog:ListAttributeGroups", + "signer:ListSigningProfiles", + "sns:ListTopics", + "sqs:ListQueues", + "ssm-incidents:ListResponsePlans", + "ssm:DescribeAutomationExecutions", + "ssm:DescribeInstanceInformation", + "ssm:DescribeMaintenanceWindowTargets", + "ssm:DescribeMaintenanceWindowTasks", + "ssm:DescribeMaintenanceWindows", + "ssm:DescribeParameters", + "ssm:DescribePatchBaselines", + "ssm:ListAssociations", + "ssm:ListDocuments", + "ssm:ListInventoryEntries", + "ssm:ListResourceDataSync", + "states:ListActivities", + "states:ListStateMachines", + "timestream:ListDatabases", + "transfer:ListWorkflows", + "wisdom:ListAssistants", + "wisdom:listAssistantAssociations", + "wisdom:listKnowledgeBases", + "workspaces:DescribeWorkspaces" + ], + "Resource": "*" + } + ] +} \ No newline at end of file diff --git a/data/json/ReadOnlyAccess/v120/policy.json b/data/json/ReadOnlyAccess/v120/policy.json new file mode 100644 index 00000000..83e33194 --- /dev/null +++ b/data/json/ReadOnlyAccess/v120/policy.json @@ -0,0 +1,2355 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "ReadOnlyActions", + "Effect": "Allow", + "Action": [ + "a4b:Get*", + "a4b:List*", + "a4b:Search*", + "access-analyzer:GetAccessPreview", + "access-analyzer:GetAnalyzedResource", + "access-analyzer:GetAnalyzer", + "access-analyzer:GetArchiveRule", + "access-analyzer:GetFinding", + "access-analyzer:GetGeneratedPolicy", + "access-analyzer:ListAccessPreviewFindings", + "access-analyzer:ListAccessPreviews", + "access-analyzer:ListAnalyzedResources", + "access-analyzer:ListAnalyzers", + "access-analyzer:ListArchiveRules", + "access-analyzer:ListFindings", + "access-analyzer:ListPolicyGenerations", + "access-analyzer:ListTagsForResource", + "access-analyzer:ValidatePolicy", + "account:GetAccountInformation", + "account:GetAlternateContact", + "account:GetChallengeQuestions", + "account:GetContactInformation", + "account:GetPrimaryEmail", + "account:GetRegionOptStatus", + "account:ListRegions", + "acm-pca:Describe*", + "acm-pca:Get*", + "acm-pca:List*", + "acm:Describe*", + "acm:Get*", + "acm:List*", + "airflow:ListEnvironments", + "airflow:ListTagsForResource", + "amplify:GetApp", + "amplify:GetBranch", + "amplify:GetDomainAssociation", + "amplify:GetJob", + "amplify:ListApps", + "amplify:ListBranches", + "amplify:ListDomainAssociations", + "amplify:ListJobs", + "aoss:BatchGetCollection", + "aoss:BatchGetLifecyclePolicy", + "aoss:BatchGetVpcEndpoint", + "aoss:GetAccessPolicy", + "aoss:GetAccountSettings", + "aoss:GetPoliciesStats", + "aoss:GetSecurityConfig", + "aoss:GetSecurityPolicy", + "aoss:ListAccessPolicies", + "aoss:ListCollections", + "aoss:ListLifecyclePolicies", + "aoss:ListSecurityConfigs", + "aoss:ListSecurityPolicies", + "aoss:ListTagsForResource", + "aoss:ListVpcEndpoints", + "apigateway:GET", + "appconfig:GetApplication", + "appconfig:GetConfiguration", + "appconfig:GetConfigurationProfile", + "appconfig:GetDeployment", + "appconfig:GetDeploymentStrategy", + "appconfig:GetEnvironment", + "appconfig:GetHostedConfigurationVersion", + "appconfig:ListApplications", + "appconfig:ListConfigurationProfiles", + "appconfig:ListDeployments", + "appconfig:ListDeploymentStrategies", + "appconfig:ListEnvironments", + "appconfig:ListHostedConfigurationVersions", + "appconfig:ListTagsForResource", + "appfabric:GetAppAuthorization", + "appfabric:GetAppBundle", + "appfabric:GetIngestion", + "appfabric:GetIngestionDestination", + "appfabric:ListAppAuthorizations", + "appfabric:ListAppBundles", + "appfabric:ListIngestionDestinations", + "appfabric:ListIngestions", + "appfabric:ListTagsForResource", + "appflow:DescribeConnector", + "appflow:DescribeConnectorEntity", + "appflow:DescribeConnectorFields", + "appflow:DescribeConnectorProfiles", + "appflow:DescribeConnectors", + "appflow:DescribeFlow", + "appflow:DescribeFlowExecution", + "appflow:DescribeFlowExecutionRecords", + "appflow:DescribeFlows", + "appflow:ListConnectorEntities", + "appflow:ListConnectorFields", + "appflow:ListConnectors", + "appflow:ListFlows", + "appflow:ListTagsForResource", + "application-autoscaling:Describe*", + "application-autoscaling:ListTagsForResource", + "application-signals:BatchGetServiceLevelObjectiveBudgetReport", + "application-signals:GetService", + "application-signals:GetServiceLevelObjective", + "application-signals:ListServiceDependencies", + "application-signals:ListServiceDependents", + "application-signals:ListServiceLevelObjectives", + "application-signals:ListServiceOperations", + "application-signals:ListServices", + "application-signals:ListTagsForResource", + "applicationinsights:Describe*", + "applicationinsights:List*", + "appmesh:Describe*", + "appmesh:List*", + "apprunner:DescribeAutoScalingConfiguration", + "apprunner:DescribeCustomDomains", + "apprunner:DescribeObservabilityConfiguration", + "apprunner:DescribeService", + "apprunner:DescribeVpcConnector", + "apprunner:DescribeVpcIngressConnection", + "apprunner:DescribeWebAclForService", + "apprunner:ListAssociatedServicesForWebAcl", + "apprunner:ListAutoScalingConfigurations", + "apprunner:ListConnections", + "apprunner:ListObservabilityConfigurations", + "apprunner:ListOperations", + "apprunner:ListServices", + "apprunner:ListServicesForAutoScalingConfiguration", + "apprunner:ListTagsForResource", + "apprunner:ListVpcConnectors", + "apprunner:ListVpcIngressConnections", + "appstream:Describe*", + "appstream:List*", + "appstudio:GetAccountStatus", + "appstudio:GetEnablementJobStatus", + "appsync:Get*", + "appsync:List*", + "aps:DescribeAlertManagerDefinition", + "aps:DescribeLoggingConfiguration", + "aps:DescribeRuleGroupsNamespace", + "aps:DescribeScraper", + "aps:DescribeWorkspace", + "aps:GetAlertManagerSilence", + "aps:GetAlertManagerStatus", + "aps:GetDefaultScraperConfiguration", + "aps:GetLabels", + "aps:GetMetricMetadata", + "aps:GetSeries", + "aps:ListAlertManagerAlertGroups", + "aps:ListAlertManagerAlerts", + "aps:ListAlertManagerReceivers", + "aps:ListAlertManagerSilences", + "aps:ListAlerts", + "aps:ListRuleGroupsNamespaces", + "aps:ListRules", + "aps:ListScrapers", + "aps:ListTagsForResource", + "aps:ListWorkspaces", + "aps:QueryMetrics", + "arc-zonal-shift:GetManagedResource", + "arc-zonal-shift:ListAutoshifts", + "arc-zonal-shift:ListManagedResources", + "arc-zonal-shift:ListZonalShifts", + "artifact:GetReport", + "artifact:GetReportMetadata", + "artifact:GetTermForReport", + "artifact:ListReports", + "athena:Batch*", + "athena:Get*", + "athena:List*", + "auditmanager:GetAccountStatus", + "auditmanager:GetAssessment", + "auditmanager:GetAssessmentFramework", + "auditmanager:GetAssessmentReportUrl", + "auditmanager:GetChangeLogs", + "auditmanager:GetControl", + "auditmanager:GetDelegations", + "auditmanager:GetEvidence", + "auditmanager:GetEvidenceByEvidenceFolder", + "auditmanager:GetEvidenceFolder", + "auditmanager:GetEvidenceFoldersByAssessment", + "auditmanager:GetEvidenceFoldersByAssessmentControl", + "auditmanager:GetOrganizationAdminAccount", + "auditmanager:GetServicesInScope", + "auditmanager:GetSettings", + "auditmanager:ListAssessmentFrameworks", + "auditmanager:ListAssessmentReports", + "auditmanager:ListAssessments", + "auditmanager:ListControls", + "auditmanager:ListKeywordsForDataSource", + "auditmanager:ListNotifications", + "auditmanager:ListTagsForResource", + "auditmanager:ValidateAssessmentReportIntegrity", + "autoscaling-plans:Describe*", + "autoscaling-plans:GetScalingPlanResourceForecastData", + "autoscaling:Describe*", + "autoscaling:GetPredictiveScalingForecast", + "aws-portal:View*", + "backup-gateway:GetBandwidthRateLimitSchedule", + "backup-gateway:GetGateway", + "backup-gateway:GetHypervisor", + "backup-gateway:GetHypervisorPropertyMappings", + "backup-gateway:GetVirtualMachine", + "backup-gateway:ListGateways", + "backup-gateway:ListHypervisors", + "backup-gateway:ListTagsForResource", + "backup-gateway:ListVirtualMachines", + "backup:Describe*", + "backup:Get*", + "backup:List*", + "batch:Describe*", + "batch:List*", + "bedrock:GetAgent", + "bedrock:GetAgentActionGroup", + "bedrock:GetAgentAlias", + "bedrock:GetAgentKnowledgeBase", + "bedrock:GetAgentVersion", + "bedrock:GetCustomModel", + "bedrock:GetDataSource", + "bedrock:GetEvaluationJob", + "bedrock:GetFlow", + "bedrock:GetFlowAlias", + "bedrock:GetFlowVersion", + "bedrock:GetFoundationModel", + "bedrock:GetFoundationModelAvailability", + "bedrock:GetGuardrail", + "bedrock:GetInferenceProfile", + "bedrock:GetIngestionJob", + "bedrock:GetKnowledgeBase", + "bedrock:GetModelCustomizationJob", + "bedrock:GetModelInvocationLoggingConfiguration", + "bedrock:GetPrompt", + "bedrock:GetProvisionedModelThroughput", + "bedrock:GetUseCaseForModelAccess", + "bedrock:ListAgentActionGroups", + "bedrock:ListAgentAliases", + "bedrock:ListAgentKnowledgeBases", + "bedrock:ListAgents", + "bedrock:ListAgentVersions", + "bedrock:ListCustomModels", + "bedrock:ListDataSources", + "bedrock:ListEvaluationJobs", + "bedrock:ListFlows", + "bedrock:ListFlowAliases", + "bedrock:ListFlowVersions", + "bedrock:ListFoundationModelAgreementOffers", + "bedrock:ListFoundationModels", + "bedrock:ListGuardrails", + "bedrock:ListInferenceProfiles", + "bedrock:ListIngestionJobs", + "bedrock:ListKnowledgeBases", + "bedrock:ListModelCustomizationJobs", + "bedrock:ListPrompts", + "bedrock:ListProvisionedModelThroughputs", + "billing:GetBillingData", + "billing:GetBillingDetails", + "billing:GetBillingNotifications", + "billing:GetBillingPreferences", + "billing:GetContractInformation", + "billing:GetCredits", + "billing:GetIAMAccessPreference", + "billing:GetSellerOfRecord", + "billing:ListBillingViews", + "billingconductor:GetBillingGroupCostReport", + "billingconductor:ListAccountAssociations", + "billingconductor:ListBillingGroupCostReports", + "billingconductor:ListBillingGroups", + "billingconductor:ListCustomLineItems", + "billingconductor:ListCustomLineItemVersions", + "billingconductor:ListPricingPlans", + "billingconductor:ListPricingPlansAssociatedWithPricingRule", + "billingconductor:ListPricingRules", + "billingconductor:ListPricingRulesAssociatedToPricingPlan", + "billingconductor:ListResourcesAssociatedToCustomLineItem", + "billingconductor:ListTagsForResource", + "braket:GetDevice", + "braket:GetJob", + "braket:GetQuantumTask", + "braket:SearchDevices", + "braket:SearchJobs", + "braket:SearchQuantumTasks", + "budgets:Describe*", + "budgets:ListTagsForResource", + "budgets:View*", + "cassandra:Select", + "ce:DescribeCostCategoryDefinition", + "ce:DescribeNotificationSubscription", + "ce:DescribeReport", + "ce:GetAnomalies", + "ce:GetAnomalyMonitors", + "ce:GetAnomalySubscriptions", + "ce:GetApproximateUsageRecords", + "ce:GetCostAndUsage", + "ce:GetCostAndUsageWithResources", + "ce:GetCostCategories", + "ce:GetCostForecast", + "ce:GetDimensionValues", + "ce:GetPreferences", + "ce:GetReservationCoverage", + "ce:GetReservationPurchaseRecommendation", + "ce:GetReservationUtilization", + "ce:GetRightsizingRecommendation", + "ce:GetSavingsPlanPurchaseRecommendationDetails", + "ce:GetSavingsPlansCoverage", + "ce:GetSavingsPlansPurchaseRecommendation", + "ce:GetSavingsPlansUtilization", + "ce:GetSavingsPlansUtilizationDetails", + "ce:GetTags", + "ce:GetUsageForecast", + "ce:ListCostAllocationTagBackfillHistory", + "ce:ListCostAllocationTags", + "ce:ListCostCategoryDefinitions", + "ce:ListSavingsPlansPurchaseRecommendationGeneration", + "ce:ListTagsForResource", + "chatbot:Describe*", + "chatbot:Get*", + "chatbot:ListMicrosoftTeamsChannelConfigurations", + "chatbot:ListMicrosoftTeamsConfiguredTeams", + "chatbot:ListMicrosoftTeamsUserIdentities", + "chatbot:ListTagsForResource", + "chime:Get*", + "chime:List*", + "chime:Retrieve*", + "chime:Search*", + "chime:Validate*", + "cleanrooms-ml:GetAudienceGenerationJob", + "cleanrooms-ml:GetAudienceModel", + "cleanrooms-ml:GetConfiguredAudienceModel", + "cleanrooms-ml:GetConfiguredAudienceModelPolicy", + "cleanrooms-ml:GetTrainingDataset", + "cleanrooms-ml:ListAudienceExportJobs", + "cleanrooms-ml:ListAudienceGenerationJobs", + "cleanrooms-ml:ListAudienceModels", + "cleanrooms-ml:ListConfiguredAudienceModels", + "cleanrooms-ml:ListTagsForResource", + "cleanrooms-ml:ListTrainingDatasets", + "cleanrooms:BatchGetCollaborationAnalysisTemplate", + "cleanrooms:BatchGetSchema", + "cleanrooms:GetAnalysisTemplate", + "cleanrooms:GetCollaboration", + "cleanrooms:GetCollaborationAnalysisTemplate", + "cleanrooms:GetConfiguredAudienceModelAssociation", + "cleanrooms:GetConfiguredTable", + "cleanrooms:GetConfiguredTableAnalysisRule", + "cleanrooms:GetConfiguredTableAssociation", + "cleanrooms:GetMembership", + "cleanrooms:GetProtectedQuery", + "cleanrooms:GetSchema", + "cleanrooms:GetSchemaAnalysisRule", + "cleanrooms:ListAnalysisTemplates", + "cleanrooms:ListCollaborationAnalysisTemplates", + "cleanrooms:ListCollaborationConfiguredAudienceModelAssociations", + "cleanrooms:ListCollaborations", + "cleanrooms:ListConfiguredTableAssociations", + "cleanrooms:ListConfiguredTables", + "cleanrooms:ListMembers", + "cleanrooms:ListMemberships", + "cleanrooms:ListProtectedQueries", + "cleanrooms:ListSchemas", + "cleanrooms:ListTagsForResource", + "cloud9:Describe*", + "cloud9:List*", + "clouddirectory:BatchRead", + "clouddirectory:Get*", + "clouddirectory:List*", + "clouddirectory:LookupPolicy", + "cloudformation:Describe*", + "cloudformation:Detect*", + "cloudformation:Estimate*", + "cloudformation:Get*", + "cloudformation:List*", + "cloudformation:ValidateTemplate", + "cloudfront-keyvaluestore:Describe*", + "cloudfront-keyvaluestore:Get*", + "cloudfront-keyvaluestore:List*", + "cloudfront:Describe*", + "cloudfront:Get*", + "cloudfront:List*", + "cloudhsm:Describe*", + "cloudhsm:List*", + "cloudsearch:Describe*", + "cloudsearch:List*", + "cloudtrail:Describe*", + "cloudtrail:Get*", + "cloudtrail:List*", + "cloudtrail:LookupEvents", + "cloudwatch:Describe*", + "cloudwatch:GenerateQuery", + "cloudwatch:Get*", + "cloudwatch:List*", + "codeartifact:DescribeDomain", + "codeartifact:DescribePackage", + "codeartifact:DescribePackageVersion", + "codeartifact:DescribeRepository", + "codeartifact:GetAuthorizationToken", + "codeartifact:GetDomainPermissionsPolicy", + "codeartifact:GetPackageVersionAsset", + "codeartifact:GetPackageVersionReadme", + "codeartifact:GetRepositoryEndpoint", + "codeartifact:GetRepositoryPermissionsPolicy", + "codeartifact:ListDomains", + "codeartifact:ListPackages", + "codeartifact:ListPackageVersionAssets", + "codeartifact:ListPackageVersionDependencies", + "codeartifact:ListPackageVersions", + "codeartifact:ListRepositories", + "codeartifact:ListRepositoriesInDomain", + "codeartifact:ListTagsForResource", + "codeartifact:ReadFromRepository", + "codebuild:BatchGet*", + "codebuild:DescribeCodeCoverages", + "codebuild:DescribeTestCases", + "codebuild:List*", + "codecatalyst:GetBillingAuthorization", + "codecatalyst:GetConnection", + "codecatalyst:GetPendingConnection", + "codecatalyst:ListConnections", + "codecatalyst:ListIamRolesForConnection", + "codecatalyst:ListTagsForResource", + "codecommit:BatchGet*", + "codecommit:Describe*", + "codecommit:Get*", + "codecommit:GitPull", + "codecommit:List*", + "codedeploy:BatchGet*", + "codedeploy:Get*", + "codedeploy:List*", + "codeguru-profiler:Describe*", + "codeguru-profiler:Get*", + "codeguru-profiler:List*", + "codeguru-reviewer:Describe*", + "codeguru-reviewer:Get*", + "codeguru-reviewer:List*", + "codepipeline:Get*", + "codepipeline:List*", + "codestar-connections:GetConnection", + "codestar-connections:GetHost", + "codestar-connections:GetRepositoryLink", + "codestar-connections:GetRepositorySyncStatus", + "codestar-connections:GetResourceSyncStatus", + "codestar-connections:GetSyncConfiguration", + "codestar-connections:ListConnections", + "codestar-connections:ListHosts", + "codestar-connections:ListRepositoryLinks", + "codestar-connections:ListRepositorySyncDefinitions", + "codestar-connections:ListSyncConfigurations", + "codestar-connections:ListTagsForResource", + "codestar-notifications:describeNotificationRule", + "codestar-notifications:listEventTypes", + "codestar-notifications:listNotificationRules", + "codestar-notifications:listTagsForResource", + "codestar-notifications:ListTargets", + "codestar:Describe*", + "codestar:Get*", + "codestar:List*", + "codestar:Verify*", + "cognito-identity:Describe*", + "cognito-identity:GetCredentialsForIdentity", + "cognito-identity:GetIdentityPoolAnalytics", + "cognito-identity:GetIdentityPoolDailyAnalytics", + "cognito-identity:GetIdentityPoolRoles", + "cognito-identity:GetIdentityProviderDailyAnalytics", + "cognito-identity:GetOpenIdToken", + "cognito-identity:GetOpenIdTokenForDeveloperIdentity", + "cognito-identity:List*", + "cognito-identity:Lookup*", + "cognito-idp:AdminGet*", + "cognito-idp:AdminList*", + "cognito-idp:Describe*", + "cognito-idp:Get*", + "cognito-idp:List*", + "cognito-sync:Describe*", + "cognito-sync:Get*", + "cognito-sync:List*", + "cognito-sync:QueryRecords", + "comprehend:BatchDetect*", + "comprehend:Classify*", + "comprehend:Contains*", + "comprehend:Describe*", + "comprehend:Detect*", + "comprehend:List*", + "compute-optimizer:DescribeRecommendationExportJobs", + "compute-optimizer:GetAutoScalingGroupRecommendations", + "compute-optimizer:GetEBSVolumeRecommendations", + "compute-optimizer:GetEC2InstanceRecommendations", + "compute-optimizer:GetEC2RecommendationProjectedMetrics", + "compute-optimizer:GetECSServiceRecommendationProjectedMetrics", + "compute-optimizer:GetECSServiceRecommendations", + "compute-optimizer:GetEffectiveRecommendationPreferences", + "compute-optimizer:GetEnrollmentStatus", + "compute-optimizer:GetEnrollmentStatusesForOrganization", + "compute-optimizer:GetLambdaFunctionRecommendations", + "compute-optimizer:GetLicenseRecommendations", + "compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics", + "compute-optimizer:GetRDSDatabaseRecommendations", + "compute-optimizer:GetRecommendationPreferences", + "compute-optimizer:GetRecommendationSummaries", + "config:BatchGetAggregateResourceConfig", + "config:BatchGetResourceConfig", + "config:Deliver*", + "config:Describe*", + "config:Get*", + "config:List*", + "config:SelectAggregateResourceConfig", + "config:SelectResourceConfig", + "connect:Describe*", + "connect:GetContactAttributes", + "connect:GetCurrentMetricData", + "connect:GetCurrentUserData", + "connect:GetFederationToken", + "connect:GetMetricData", + "connect:GetMetricDataV2", + "connect:GetTaskTemplate", + "connect:GetTrafficDistribution", + "connect:List*", + "consoleapp:GetDeviceIdentity", + "consoleapp:ListDeviceIdentities", + "consolidatedbilling:GetAccountBillingRole", + "consolidatedbilling:ListLinkedAccounts", + "controlcatalog:ListCommonControls", + "controlcatalog:ListDomains", + "controlcatalog:ListObjectives", + "cost-optimization-hub:GetPreferences", + "cost-optimization-hub:GetRecommendation", + "cost-optimization-hub:ListEnrollmentStatuses", + "cost-optimization-hub:ListRecommendations", + "cost-optimization-hub:ListRecommendationSummaries", + "cur:GetClassicReport", + "cur:GetClassicReportPreferences", + "cur:GetUsageReport", + "customer-verification:GetCustomerVerificationDetails", + "customer-verification:GetCustomerVerificationEligibility", + "databrew:DescribeDataset", + "databrew:DescribeJob", + "databrew:DescribeJobRun", + "databrew:DescribeProject", + "databrew:DescribeRecipe", + "databrew:DescribeRuleset", + "databrew:DescribeSchedule", + "databrew:ListDatasets", + "databrew:ListJobRuns", + "databrew:ListJobs", + "databrew:ListProjects", + "databrew:ListRecipes", + "databrew:ListRecipeVersions", + "databrew:ListRulesets", + "databrew:ListSchedules", + "databrew:ListTagsForResource", + "dataexchange:Get*", + "dataexchange:List*", + "datapipeline:Describe*", + "datapipeline:EvaluateExpression", + "datapipeline:Get*", + "datapipeline:List*", + "datapipeline:QueryObjects", + "datapipeline:Validate*", + "datasync:Describe*", + "datasync:List*", + "datazone:GetAsset", + "datazone:GetAssetType", + "datazone:GetDataProduct", + "datazone:GetDataSource", + "datazone:GetDataSourceRun", + "datazone:GetDomain", + "datazone:GetDomainSharingPolicy", + "datazone:GetDomainUnit", + "datazone:GetEnvironment", + "datazone:GetEnvironmentAction", + "datazone:GetEnvironmentBlueprint", + "datazone:GetEnvironmentBlueprintConfiguration", + "datazone:GetEnvironmentProfile", + "datazone:GetFormType", + "datazone:GetGlossary", + "datazone:GetGlossaryTerm", + "datazone:GetGroupProfile", + "datazone:GetLineageNode", + "datazone:GetListing", + "datazone:GetListing", + "datazone:GetMetadataGenerationRun", + "datazone:GetProject", + "datazone:GetProjectProfile", + "datazone:GetSubscription", + "datazone:GetSubscriptionEligibility", + "datazone:GetSubscriptionGrant", + "datazone:GetSubscriptionRequestDetails", + "datazone:GetSubscriptionTarget", + "datazone:GetTimeSeriesDataPoint", + "datazone:GetUserProfile", + "datazone:ListAccountEnvironments", + "datazone:ListAssetRevisions", + "datazone:ListDataProductRevisions", + "datazone:ListDataSourceRunActivities", + "datazone:ListDataSourceRuns", + "datazone:ListDataSources", + "datazone:ListDomains", + "datazone:ListDomainUnitsForParent", + "datazone:ListEntityOwners", + "datazone:ListEnvironmentActions", + "datazone:ListEnvironmentBlueprintConfigurations", + "datazone:ListEnvironmentBlueprintConfigurationSummaries", + "datazone:ListEnvironmentBlueprints", + "datazone:ListEnvironmentProfiles", + "datazone:ListEnvironments", + "datazone:ListGroupsForUser", + "datazone:ListLineageNodeHistory", + "datazone:ListNotifications", + "datazone:ListPolicyGrants", + "datazone:ListProjectMemberships", + "datazone:ListProjectProfiles", + "datazone:ListProjects", + "datazone:ListSubscriptionGrants", + "datazone:ListSubscriptionRequests", + "datazone:ListSubscriptions", + "datazone:ListSubscriptionTargets", + "datazone:ListTagsForResource", + "datazone:ListTimeSeriesDataPoints", + "datazone:Search", + "datazone:SearchGroupProfiles", + "datazone:SearchListings", + "datazone:SearchTypes", + "datazone:SearchUserProfiles", + "dax:BatchGetItem", + "dax:Describe*", + "dax:GetItem", + "dax:ListTags", + "dax:Query", + "dax:Scan", + "deadline:BatchGetJobEntity", + "deadline:GetApplicationVersion", + "deadline:GetBudget", + "deadline:GetFarm", + "deadline:GetFleet", + "deadline:GetJob", + "deadline:GetLicenseEndpoint", + "deadline:GetMonitor", + "deadline:GetQueue", + "deadline:GetQueueEnvironment", + "deadline:GetQueueFleetAssociation", + "deadline:GetSession", + "deadline:GetSessionAction", + "deadline:GetSessionsStatisticsAggregation", + "deadline:GetStep", + "deadline:GetStorageProfile", + "deadline:GetStorageProfileForQueue", + "deadline:GetTask", + "deadline:GetWorker", + "deadline:ListAvailableMeteredProducts", + "deadline:ListBudgets", + "deadline:ListFarmMembers", + "deadline:ListFarms", + "deadline:ListFleetMembers", + "deadline:ListFleets", + "deadline:ListJobMembers", + "deadline:ListJobs", + "deadline:ListLicenseEndpoints", + "deadline:ListMeteredProducts", + "deadline:ListMonitors", + "deadline:ListQueueEnvironments", + "deadline:ListQueueFleetAssociations", + "deadline:ListQueueMembers", + "deadline:ListQueues", + "deadline:ListSessionActions", + "deadline:ListSessions", + "deadline:ListSessionsForWorker", + "deadline:ListStepConsumers", + "deadline:ListStepDependencies", + "deadline:ListSteps", + "deadline:ListStorageProfiles", + "deadline:ListStorageProfilesForQueue", + "deadline:ListTagsForResource", + "deadline:ListTasks", + "deadline:ListWorkers", + "deadline:SearchJobs", + "deadline:SearchSteps", + "deadline:SearchTasks", + "deadline:SearchWorkers", + "deepcomposer:GetComposition", + "deepcomposer:GetModel", + "deepcomposer:GetSampleModel", + "deepcomposer:ListCompositions", + "deepcomposer:ListModels", + "deepcomposer:ListSampleModels", + "deepcomposer:ListTrainingTopics", + "detective:BatchGetGraphMemberDatasources", + "detective:BatchGetMembershipDatasources", + "detective:Get*", + "detective:List*", + "detective:SearchGraph", + "devicefarm:Get*", + "devicefarm:List*", + "devops-guru:DescribeAccountHealth", + "devops-guru:DescribeAccountOverview", + "devops-guru:DescribeAnomaly", + "devops-guru:DescribeEventSourcesConfig", + "devops-guru:DescribeFeedback", + "devops-guru:DescribeInsight", + "devops-guru:DescribeOrganizationHealth", + "devops-guru:DescribeOrganizationOverview", + "devops-guru:DescribeOrganizationResourceCollectionHealth", + "devops-guru:DescribeResourceCollectionHealth", + "devops-guru:DescribeServiceIntegration", + "devops-guru:GetCostEstimation", + "devops-guru:GetResourceCollection", + "devops-guru:ListAnomaliesForInsight", + "devops-guru:ListAnomalousLogGroups", + "devops-guru:ListEvents", + "devops-guru:ListInsights", + "devops-guru:ListMonitoredResources", + "devops-guru:ListNotificationChannels", + "devops-guru:ListOrganizationInsights", + "devops-guru:ListRecommendations", + "devops-guru:SearchInsights", + "devops-guru:StartCostEstimation", + "directconnect:Describe*", + "discovery:Describe*", + "discovery:Get*", + "discovery:List*", + "dlm:Get*", + "dms:Describe*", + "dms:List*", + "dms:Test*", + "drs:DescribeJobLogItems", + "drs:DescribeJobs", + "drs:DescribeLaunchConfigurationTemplates", + "drs:DescribeRecoveryInstances", + "drs:DescribeRecoverySnapshots", + "drs:DescribeReplicationConfigurationTemplates", + "drs:DescribeSourceNetworks", + "drs:DescribeSourceServers", + "drs:GetFailbackReplicationConfiguration", + "drs:GetLaunchConfiguration", + "drs:GetReplicationConfiguration", + "drs:ListExtensibleSourceServers", + "drs:ListLaunchActions", + "drs:ListStagingAccounts", + "drs:ListTagsForResource", + "ds:Check*", + "ds:Describe*", + "ds:Get*", + "ds:List*", + "ds:Verify*", + "dynamodb:BatchGet*", + "dynamodb:Describe*", + "dynamodb:Get*", + "dynamodb:List*", + "dynamodb:PartiQLSelect", + "dynamodb:Query", + "dynamodb:Scan", + "ec2:Describe*", + "ec2:Get*", + "ec2:ListImagesInRecycleBin", + "ec2:ListSnapshotsInRecycleBin", + "ec2:SearchLocalGatewayRoutes", + "ec2:SearchTransitGatewayRoutes", + "ec2messages:Get*", + "ecr-public:BatchCheckLayerAvailability", + "ecr-public:DescribeImages", + "ecr-public:DescribeImageTags", + "ecr-public:DescribeRegistries", + "ecr-public:DescribeRepositories", + "ecr-public:GetAuthorizationToken", + "ecr-public:GetRegistryCatalogData", + "ecr-public:GetRepositoryCatalogData", + "ecr-public:GetRepositoryPolicy", + "ecr-public:ListTagsForResource", + "ecr:BatchCheck*", + "ecr:BatchGet*", + "ecr:Describe*", + "ecr:Get*", + "ecr:List*", + "ecs:Describe*", + "ecs:List*", + "eks:Describe*", + "eks:List*", + "elastic-inference:DescribeAcceleratorOfferings", + "elastic-inference:DescribeAccelerators", + "elastic-inference:DescribeAcceleratorTypes", + "elastic-inference:ListTagsForResource", + "elasticache:Describe*", + "elasticache:List*", + "elasticbeanstalk:Check*", + "elasticbeanstalk:Describe*", + "elasticbeanstalk:List*", + "elasticbeanstalk:Request*", + "elasticbeanstalk:Retrieve*", + "elasticbeanstalk:Validate*", + "elasticfilesystem:Describe*", + "elasticfilesystem:ListTagsForResource", + "elasticloadbalancing:Describe*", + "elasticmapreduce:Describe*", + "elasticmapreduce:GetBlockPublicAccessConfiguration", + "elasticmapreduce:List*", + "elasticmapreduce:View*", + "elastictranscoder:List*", + "elastictranscoder:Read*", + "elemental-appliances-software:Get*", + "elemental-appliances-software:List*", + "emr-containers:DescribeJobRun", + "emr-containers:DescribeManagedEndpoint", + "emr-containers:DescribeVirtualCluster", + "emr-containers:ListJobRuns", + "emr-containers:ListManagedEndpoints", + "emr-containers:ListTagsForResource", + "emr-containers:ListVirtualClusters", + "emr-serverless:GetApplication", + "emr-serverless:GetDashboardForJobRun", + "emr-serverless:GetJobRun", + "emr-serverless:ListApplications", + "emr-serverless:ListJobRuns", + "emr-serverless:ListTagsForResource", + "es:Describe*", + "es:ESHttpGet", + "es:ESHttpHead", + "es:Get*", + "es:List*", + "events:Describe*", + "events:List*", + "events:Test*", + "evidently:GetExperiment", + "evidently:GetExperimentResults", + "evidently:GetFeature", + "evidently:GetLaunch", + "evidently:GetProject", + "evidently:GetSegment", + "evidently:ListExperiments", + "evidently:ListFeatures", + "evidently:ListLaunches", + "evidently:ListProjects", + "evidently:ListSegmentReferences", + "evidently:ListSegments", + "evidently:ListTagsForResource", + "evidently:TestSegmentPattern", + "firehose:Describe*", + "firehose:List*", + "fis:GetAction", + "fis:GetExperiment", + "fis:GetExperimentTargetAccountConfiguration", + "fis:GetExperimentTemplate", + "fis:GetTargetAccountConfiguration", + "fis:GetTargetResourceType", + "fis:ListActions", + "fis:ListExperimentResolvedTargets", + "fis:ListExperiments", + "fis:ListExperimentTargetAccountConfigurations", + "fis:ListExperimentTemplates", + "fis:ListTagsForResource", + "fis:ListTargetAccountConfigurations", + "fis:ListTargetResourceTypes", + "fms:GetAdminAccount", + "fms:GetAppsList", + "fms:GetComplianceDetail", + "fms:GetNotificationChannel", + "fms:GetPolicy", + "fms:GetProtectionStatus", + "fms:GetProtocolsList", + "fms:GetViolationDetails", + "fms:ListAppsLists", + "fms:ListComplianceStatus", + "fms:ListMemberAccounts", + "fms:ListPolicies", + "fms:ListProtocolsLists", + "fms:ListTagsForResource", + "forecast:DescribeAutoPredictor", + "forecast:DescribeDataset", + "forecast:DescribeDatasetGroup", + "forecast:DescribeDatasetImportJob", + "forecast:DescribeExplainability", + "forecast:DescribeExplainabilityExport", + "forecast:DescribeForecast", + "forecast:DescribeForecastExportJob", + "forecast:DescribeMonitor", + "forecast:DescribePredictor", + "forecast:DescribePredictorBacktestExportJob", + "forecast:DescribeWhatIfAnalysis", + "forecast:DescribeWhatIfForecast", + "forecast:DescribeWhatIfForecastExport", + "forecast:GetAccuracyMetrics", + "forecast:ListDatasetGroups", + "forecast:ListDatasetImportJobs", + "forecast:ListDatasets", + "forecast:ListExplainabilities", + "forecast:ListExplainabilityExports", + "forecast:ListForecastExportJobs", + "forecast:ListForecasts", + "forecast:ListMonitorEvaluations", + "forecast:ListMonitors", + "forecast:ListPredictorBacktestExportJobs", + "forecast:ListPredictors", + "forecast:ListWhatIfAnalyses", + "forecast:ListWhatIfForecastExports", + "forecast:ListWhatIfForecasts", + "forecast:QueryForecast", + "forecast:QueryWhatIfForecast", + "frauddetector:BatchGetVariable", + "frauddetector:DescribeDetector", + "frauddetector:DescribeModelVersions", + "frauddetector:GetBatchImportJobs", + "frauddetector:GetBatchPredictionJobs", + "frauddetector:GetDeleteEventsByEventTypeStatus", + "frauddetector:GetDetectors", + "frauddetector:GetDetectorVersion", + "frauddetector:GetEntityTypes", + "frauddetector:GetEvent", + "frauddetector:GetEventPredictionMetadata", + "frauddetector:GetEventTypes", + "frauddetector:GetExternalModels", + "frauddetector:GetKMSEncryptionKey", + "frauddetector:GetLabels", + "frauddetector:GetListElements", + "frauddetector:GetListsMetadata", + "frauddetector:GetModels", + "frauddetector:GetModelVersion", + "frauddetector:GetOutcomes", + "frauddetector:GetRules", + "frauddetector:GetVariables", + "frauddetector:ListEventPredictions", + "frauddetector:ListTagsForResource", + "freertos:Describe*", + "freertos:List*", + "freetier:GetFreeTierAlertPreference", + "freetier:GetFreeTierUsage", + "fsx:Describe*", + "fsx:List*", + "gamelift:Describe*", + "gamelift:Get*", + "gamelift:List*", + "gamelift:ResolveAlias", + "gamelift:Search*", + "glacier:Describe*", + "glacier:Get*", + "glacier:List*", + "globalaccelerator:Describe*", + "globalaccelerator:List*", + "glue:BatchGetCrawlers", + "glue:BatchGetDevEndpoints", + "glue:BatchGetJobs", + "glue:BatchGetPartition", + "glue:BatchGetTableOptimizer", + "glue:BatchGetTriggers", + "glue:BatchGetWorkflows", + "glue:CheckSchemaVersionValidity", + "glue:GetCatalogImportStatus", + "glue:GetClassifier", + "glue:GetClassifiers", + "glue:GetCrawler", + "glue:GetCrawlerMetrics", + "glue:GetCrawlers", + "glue:GetDatabase", + "glue:GetDatabases", + "glue:GetDataCatalogEncryptionSettings", + "glue:GetDataflowGraph", + "glue:GetDevEndpoint", + "glue:GetDevEndpoints", + "glue:GetJob", + "glue:GetJobBookmark", + "glue:GetJobRun", + "glue:GetJobRuns", + "glue:GetJobs", + "glue:GetMapping", + "glue:GetMLTaskRun", + "glue:GetMLTaskRuns", + "glue:GetMLTransform", + "glue:GetMLTransforms", + "glue:GetPartition", + "glue:GetPartitions", + "glue:GetPlan", + "glue:GetRegistry", + "glue:GetResourcePolicy", + "glue:GetSchema", + "glue:GetSchemaByDefinition", + "glue:GetSchemaVersion", + "glue:GetSchemaVersionsDiff", + "glue:GetSecurityConfiguration", + "glue:GetSecurityConfigurations", + "glue:GetTable", + "glue:GetTableOptimizer", + "glue:GetTables", + "glue:GetTableVersion", + "glue:GetTableVersions", + "glue:GetTags", + "glue:GetTrigger", + "glue:GetTriggers", + "glue:GetUserDefinedFunction", + "glue:GetUserDefinedFunctions", + "glue:GetWorkflow", + "glue:GetWorkflowRun", + "glue:GetWorkflowRunProperties", + "glue:GetWorkflowRuns", + "glue:ListCrawlers", + "glue:ListCrawls", + "glue:ListDevEndpoints", + "glue:ListJobs", + "glue:ListMLTransforms", + "glue:ListRegistries", + "glue:ListSchemas", + "glue:ListSchemaVersions", + "glue:ListTableOptimizerRuns", + "glue:ListTriggers", + "glue:ListWorkflows", + "glue:QuerySchemaVersionMetadata", + "glue:SearchTables", + "grafana:DescribeWorkspace", + "grafana:DescribeWorkspaceAuthentication", + "grafana:DescribeWorkspaceConfiguration", + "grafana:ListPermissions", + "grafana:ListTagsForResource", + "grafana:ListVersions", + "grafana:ListWorkspaces", + "greengrass:DescribeComponent", + "greengrass:Get*", + "greengrass:List*", + "groundstation:DescribeContact", + "groundstation:GetConfig", + "groundstation:GetDataflowEndpointGroup", + "groundstation:GetMinuteUsage", + "groundstation:GetMissionProfile", + "groundstation:GetSatellite", + "groundstation:ListConfigs", + "groundstation:ListContacts", + "groundstation:ListDataflowEndpointGroups", + "groundstation:ListGroundStations", + "groundstation:ListMissionProfiles", + "groundstation:ListSatellites", + "groundstation:ListTagsForResource", + "guardduty:Describe*", + "guardduty:Get*", + "guardduty:List*", + "health:Describe*", + "healthlake:DescribeFHIRDatastore", + "healthlake:DescribeFHIRExportJob", + "healthlake:DescribeFHIRImportJob", + "healthlake:GetCapabilities", + "healthlake:ListFHIRDatastores", + "healthlake:ListFHIRExportJobs", + "healthlake:ListFHIRImportJobs", + "healthlake:ListTagsForResource", + "healthlake:ReadResource", + "healthlake:SearchWithGet", + "healthlake:SearchWithPost", + "iam:Generate*", + "iam:Get*", + "iam:List*", + "iam:Simulate*", + "identity-sync:GetSyncProfile", + "identity-sync:GetSyncTarget", + "identity-sync:ListSyncFilters", + "identitystore-auth:BatchGetSession", + "identitystore-auth:ListSessions", + "identitystore:DescribeGroup", + "identitystore:DescribeGroupMembership", + "identitystore:DescribeUser", + "identitystore:GetGroupId", + "identitystore:GetGroupMembershipId", + "identitystore:GetUserId", + "identitystore:IsMemberInGroups", + "identitystore:ListGroupMemberships", + "identitystore:ListGroupMembershipsForMember", + "identitystore:ListGroups", + "identitystore:ListUsers", + "imagebuilder:Get*", + "imagebuilder:List*", + "importexport:Get*", + "importexport:List*", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", + "inspector2:BatchGetAccountStatus", + "inspector2:BatchGetFreeTrialInfo", + "inspector2:DescribeOrganizationConfiguration", + "inspector2:GetDelegatedAdminAccount", + "inspector2:GetFindingsReportStatus", + "inspector2:GetMember", + "inspector2:ListAccountPermissions", + "inspector2:ListCisScans", + "inspector2:ListCoverage", + "inspector2:ListCoverageStatistics", + "inspector2:ListDelegatedAdminAccounts", + "inspector2:ListFilters", + "inspector2:ListFindingAggregations", + "inspector2:ListFindings", + "inspector2:ListMembers", + "inspector2:ListTagsForResource", + "inspector2:ListUsageTotals", + "internetmonitor:GetHealthEvent", + "internetmonitor:GetInternetEvent", + "internetmonitor:GetMonitor", + "internetmonitor:ListHealthEvents", + "internetmonitor:ListInternetEvents", + "internetmonitor:ListMonitors", + "internetmonitor:ListTagsForResource", + "invoicing:GetInvoiceEmailDeliveryPreferences", + "invoicing:GetInvoicePDF", + "invoicing:ListInvoiceSummaries", + "iot:Describe*", + "iot:Get*", + "iot:List*", + "iot1click:DescribeDevice", + "iot1click:DescribePlacement", + "iot1click:DescribeProject", + "iot1click:GetDeviceMethods", + "iot1click:GetDevicesInPlacement", + "iot1click:ListDeviceEvents", + "iot1click:ListDevices", + "iot1click:ListPlacements", + "iot1click:ListProjects", + "iot1click:ListTagsForResource", + "iotanalytics:Describe*", + "iotanalytics:Get*", + "iotanalytics:List*", + "iotanalytics:SampleChannelData", + "iotevents:DescribeAlarm", + "iotevents:DescribeAlarmModel", + "iotevents:DescribeDetector", + "iotevents:DescribeDetectorModel", + "iotevents:DescribeInput", + "iotevents:DescribeLoggingOptions", + "iotevents:ListAlarmModels", + "iotevents:ListAlarmModelVersions", + "iotevents:ListAlarms", + "iotevents:ListDetectorModels", + "iotevents:ListDetectorModelVersions", + "iotevents:ListDetectors", + "iotevents:ListInputs", + "iotevents:ListTagsForResource", + "iotfleethub:DescribeApplication", + "iotfleethub:ListApplications", + "iotfleetwise:GetCampaign", + "iotfleetwise:GetDecoderManifest", + "iotfleetwise:GetFleet", + "iotfleetwise:GetLoggingOptions", + "iotfleetwise:GetModelManifest", + "iotfleetwise:GetRegisterAccountStatus", + "iotfleetwise:GetSignalCatalog", + "iotfleetwise:GetVehicle", + "iotfleetwise:GetVehicleStatus", + "iotfleetwise:ListCampaigns", + "iotfleetwise:ListDecoderManifestNetworkInterfaces", + "iotfleetwise:ListDecoderManifests", + "iotfleetwise:ListDecoderManifestSignals", + "iotfleetwise:ListFleets", + "iotfleetwise:ListFleetsForVehicle", + "iotfleetwise:ListModelManifestNodes", + "iotfleetwise:ListModelManifests", + "iotfleetwise:ListSignalCatalogNodes", + "iotfleetwise:ListSignalCatalogs", + "iotfleetwise:ListTagsForResource", + "iotfleetwise:ListVehicles", + "iotfleetwise:ListVehiclesInFleet", + "iotroborunner:GetDestination", + "iotroborunner:GetSite", + "iotroborunner:GetWorker", + "iotroborunner:GetWorkerFleet", + "iotroborunner:ListDestinations", + "iotroborunner:ListSites", + "iotroborunner:ListWorkerFleets", + "iotroborunner:ListWorkers", + "iotsitewise:Describe*", + "iotsitewise:Get*", + "iotsitewise:List*", + "iotwireless:GetDestination", + "iotwireless:GetDeviceProfile", + "iotwireless:GetEventConfigurationByResourceTypes", + "iotwireless:GetFuotaTask", + "iotwireless:GetLogLevelsByResourceTypes", + "iotwireless:GetMetricConfiguration", + "iotwireless:GetMetrics", + "iotwireless:GetMulticastGroup", + "iotwireless:GetMulticastGroupSession", + "iotwireless:GetNetworkAnalyzerConfiguration", + "iotwireless:GetPartnerAccount", + "iotwireless:GetPosition", + "iotwireless:GetPositionConfiguration", + "iotwireless:GetPositionEstimate", + "iotwireless:GetResourceEventConfiguration", + "iotwireless:GetResourceLogLevel", + "iotwireless:GetResourcePosition", + "iotwireless:GetServiceEndpoint", + "iotwireless:GetServiceProfile", + "iotwireless:GetWirelessDevice", + "iotwireless:GetWirelessDeviceImportTask", + "iotwireless:GetWirelessDeviceStatistics", + "iotwireless:GetWirelessGateway", + "iotwireless:GetWirelessGatewayCertificate", + "iotwireless:GetWirelessGatewayFirmwareInformation", + "iotwireless:GetWirelessGatewayStatistics", + "iotwireless:GetWirelessGatewayTask", + "iotwireless:GetWirelessGatewayTaskDefinition", + "iotwireless:ListDestinations", + "iotwireless:ListDeviceProfiles", + "iotwireless:ListDevicesForWirelessDeviceImportTask", + "iotwireless:ListEventConfigurations", + "iotwireless:ListFuotaTasks", + "iotwireless:ListMulticastGroups", + "iotwireless:ListMulticastGroupsByFuotaTask", + "iotwireless:ListNetworkAnalyzerConfigurations", + "iotwireless:ListPartnerAccounts", + "iotwireless:ListPositionConfigurations", + "iotwireless:ListQueuedMessages", + "iotwireless:ListServiceProfiles", + "iotwireless:ListTagsForResource", + "iotwireless:ListWirelessDeviceImportTasks", + "iotwireless:ListWirelessDevices", + "iotwireless:ListWirelessGateways", + "iotwireless:ListWirelessGatewayTaskDefinitions", + "ivs:BatchGetChannel", + "ivs:GetChannel", + "ivs:GetComposition", + "ivs:GetEncoderConfiguration", + "ivs:GetIngestConfiguration", + "ivs:GetPublicKey", + "ivs:GetParticipant", + "ivs:GetPlaybackKeyPair", + "ivs:GetPlaybackRestrictionPolicy", + "ivs:GetRecordingConfiguration", + "ivs:GetStage", + "ivs:GetStageSession", + "ivs:GetStreamSession", + "ivs:ListChannels", + "ivs:ListCompositions", + "ivs:ListEncoderConfigurations", + "ivs:ListIngestConfigurations", + "ivs:ListParticipantEvents", + "ivs:ListParticipants", + "ivs:ListPlaybackKeyPairs", + "ivs:ListPlaybackRestrictionPolicies", + "ivs:ListPublicKeys", + "ivs:ListRecordingConfigurations", + "ivs:ListStages", + "ivs:ListStageSessions", + "ivs:ListStreamKeys", + "ivs:ListStreams", + "ivs:ListStreamSessions", + "ivs:ListTagsForResource", + "ivschat:GetLoggingConfiguration", + "ivschat:GetRoom", + "ivschat:ListLoggingConfigurations", + "ivschat:ListRooms", + "ivschat:ListTagsForResource", + "kafka:Describe*", + "kafka:DescribeCluster", + "kafka:DescribeClusterOperation", + "kafka:DescribeClusterV2", + "kafka:DescribeConfiguration", + "kafka:DescribeConfigurationRevision", + "kafka:Get*", + "kafka:GetBootstrapBrokers", + "kafka:GetCompatibleKafkaVersions", + "kafka:List*", + "kafka:ListClusterOperations", + "kafka:ListClusters", + "kafka:ListClustersV2", + "kafka:ListConfigurationRevisions", + "kafka:ListConfigurations", + "kafka:ListKafkaVersions", + "kafka:ListNodes", + "kafka:ListTagsForResource", + "kafkaconnect:DescribeConnector", + "kafkaconnect:DescribeCustomPlugin", + "kafkaconnect:DescribeWorkerConfiguration", + "kafkaconnect:ListConnectors", + "kafkaconnect:ListCustomPlugins", + "kafkaconnect:ListWorkerConfigurations", + "kendra:BatchGetDocumentStatus", + "kendra:DescribeDataSource", + "kendra:DescribeExperience", + "kendra:DescribeFaq", + "kendra:DescribeIndex", + "kendra:DescribePrincipalMapping", + "kendra:DescribeQuerySuggestionsBlockList", + "kendra:DescribeQuerySuggestionsConfig", + "kendra:DescribeThesaurus", + "kendra:GetQuerySuggestions", + "kendra:GetSnapshots", + "kendra:ListDataSources", + "kendra:ListDataSourceSyncJobs", + "kendra:ListEntityPersonas", + "kendra:ListExperienceEntities", + "kendra:ListExperiences", + "kendra:ListFaqs", + "kendra:ListGroupsOlderThanOrderingId", + "kendra:ListIndices", + "kendra:ListQuerySuggestionsBlockLists", + "kendra:ListTagsForResource", + "kendra:ListThesauri", + "kendra:Query", + "kinesis:Describe*", + "kinesis:Get*", + "kinesis:List*", + "kinesisanalytics:Describe*", + "kinesisanalytics:Discover*", + "kinesisanalytics:Get*", + "kinesisanalytics:List*", + "kinesisvideo:Describe*", + "kinesisvideo:Get*", + "kinesisvideo:List*", + "kms:Describe*", + "kms:Get*", + "kms:List*", + "lakeformation:DescribeResource", + "lakeformation:GetDataCellsFilter", + "lakeformation:GetDataLakeSettings", + "lakeformation:GetEffectivePermissionsForPath", + "lakeformation:GetLfTag", + "lakeformation:GetResourceLfTags", + "lakeformation:ListDataCellsFilter", + "lakeformation:ListLfTags", + "lakeformation:ListPermissions", + "lakeformation:ListResources", + "lakeformation:ListTableStorageOptimizers", + "lakeformation:SearchDatabasesByLfTags", + "lakeformation:SearchTablesByLfTags", + "lambda:Get*", + "lambda:List*", + "launchwizard:DescribeAdditionalNode", + "launchwizard:DescribeProvisionedApp", + "launchwizard:DescribeProvisioningEvents", + "launchwizard:DescribeSettingsSet", + "launchwizard:GetDeployment", + "launchwizard:GetInfrastructureSuggestion", + "launchwizard:GetIpAddress", + "launchwizard:GetResourceCostEstimate", + "launchwizard:GetResourceRecommendation", + "launchwizard:GetSettingsSet", + "launchwizard:GetWorkload", + "launchwizard:GetWorkloadAsset", + "launchwizard:GetWorkloadAssets", + "launchwizard:GetWorkloadDeploymentPattern", + "launchwizard:ListAdditionalNodes", + "launchwizard:ListAllowedResources", + "launchwizard:ListDeploymentEvents", + "launchwizard:ListDeployments", + "launchwizard:ListProvisionedApps", + "launchwizard:ListResourceCostEstimates", + "launchwizard:ListSettingsSets", + "launchwizard:ListTagsForResource", + "launchwizard:ListWorkloadDeploymentOptions", + "launchwizard:ListWorkloadDeploymentPatterns", + "launchwizard:ListWorkloads", + "lex:DescribeBot", + "lex:DescribeBotAlias", + "lex:DescribeBotChannel", + "lex:DescribeBotLocale", + "lex:DescribeBotReplica", + "lex:DescribeBotVersion", + "lex:DescribeExport", + "lex:DescribeImport", + "lex:DescribeIntent", + "lex:DescribeResourcePolicy", + "lex:DescribeSlot", + "lex:DescribeSlotType", + "lex:Get*", + "lex:ListBotAliases", + "lex:ListBotAliasReplicas", + "lex:ListBotChannels", + "lex:ListBotLocales", + "lex:ListBotReplicas", + "lex:ListBots", + "lex:ListBotVersionReplicas", + "lex:ListBotVersions", + "lex:ListBuiltInIntents", + "lex:ListBuiltInSlotTypes", + "lex:ListExports", + "lex:ListImports", + "lex:ListIntents", + "lex:ListSlots", + "lex:ListSlotTypes", + "lex:ListTagsForResource", + "license-manager:Get*", + "license-manager:List*", + "lightsail:GetActiveNames", + "lightsail:GetAlarms", + "lightsail:GetAutoSnapshots", + "lightsail:GetBlueprints", + "lightsail:GetBucketAccessKeys", + "lightsail:GetBucketBundles", + "lightsail:GetBucketMetricData", + "lightsail:GetBuckets", + "lightsail:GetBundles", + "lightsail:GetCertificates", + "lightsail:GetCloudFormationStackRecords", + "lightsail:GetContainerAPIMetadata", + "lightsail:GetContainerImages", + "lightsail:GetContainerServiceDeployments", + "lightsail:GetContainerServiceMetricData", + "lightsail:GetContainerServicePowers", + "lightsail:GetContainerServices", + "lightsail:GetDisk", + "lightsail:GetDisks", + "lightsail:GetDiskSnapshot", + "lightsail:GetDiskSnapshots", + "lightsail:GetDistributionBundles", + "lightsail:GetDistributionLatestCacheReset", + "lightsail:GetDistributionMetricData", + "lightsail:GetDistributions", + "lightsail:GetDomain", + "lightsail:GetDomains", + "lightsail:GetExportSnapshotRecords", + "lightsail:GetInstance", + "lightsail:GetInstanceMetricData", + "lightsail:GetInstancePortStates", + "lightsail:GetInstances", + "lightsail:GetInstanceSnapshot", + "lightsail:GetInstanceSnapshots", + "lightsail:GetInstanceState", + "lightsail:GetKeyPair", + "lightsail:GetKeyPairs", + "lightsail:GetLoadBalancer", + "lightsail:GetLoadBalancerMetricData", + "lightsail:GetLoadBalancers", + "lightsail:GetLoadBalancerTlsCertificates", + "lightsail:GetOperation", + "lightsail:GetOperations", + "lightsail:GetOperationsForResource", + "lightsail:GetRegions", + "lightsail:GetRelationalDatabase", + "lightsail:GetRelationalDatabaseBlueprints", + "lightsail:GetRelationalDatabaseBundles", + "lightsail:GetRelationalDatabaseEvents", + "lightsail:GetRelationalDatabaseLogEvents", + "lightsail:GetRelationalDatabaseLogStreams", + "lightsail:GetRelationalDatabaseMetricData", + "lightsail:GetRelationalDatabaseParameters", + "lightsail:GetRelationalDatabases", + "lightsail:GetRelationalDatabaseSnapshot", + "lightsail:GetRelationalDatabaseSnapshots", + "lightsail:GetStaticIp", + "lightsail:GetStaticIps", + "lightsail:Is*", + "logs:Describe*", + "logs:FilterLogEvents", + "logs:Get*", + "logs:ListAnomalies", + "logs:ListLogAnomalyDetectors", + "logs:ListLogDeliveries", + "logs:ListTagsForResource", + "logs:ListTagsLogGroup", + "logs:StartLiveTail", + "logs:StartQuery", + "logs:StopLiveTail", + "logs:StopQuery", + "logs:TestMetricFilter", + "lookoutequipment:DescribeDataIngestionJob", + "lookoutequipment:DescribeDataset", + "lookoutequipment:DescribeInferenceScheduler", + "lookoutequipment:DescribeLabel", + "lookoutequipment:DescribeLabelGroup", + "lookoutequipment:DescribeModel", + "lookoutequipment:DescribeModelVersion", + "lookoutequipment:DescribeResourcePolicy", + "lookoutequipment:DescribeRetrainingScheduler", + "lookoutequipment:ListDataIngestionJobs", + "lookoutequipment:ListDatasets", + "lookoutequipment:ListInferenceEvents", + "lookoutequipment:ListInferenceExecutions", + "lookoutequipment:ListInferenceSchedulers", + "lookoutequipment:ListLabelGroups", + "lookoutequipment:ListLabels", + "lookoutequipment:ListModels", + "lookoutequipment:ListModelVersions", + "lookoutequipment:ListRetrainingSchedulers", + "lookoutequipment:ListSensorStatistics", + "lookoutequipment:ListTagsForResource", + "lookoutmetrics:Describe*", + "lookoutmetrics:Get*", + "lookoutmetrics:List*", + "lookoutvision:DescribeDataset", + "lookoutvision:DescribeModel", + "lookoutvision:DescribeModelPackagingJob", + "lookoutvision:DescribeProject", + "lookoutvision:ListDatasetEntries", + "lookoutvision:ListModelPackagingJobs", + "lookoutvision:ListModels", + "lookoutvision:ListProjects", + "lookoutvision:ListTagsForResource", + "m2:GetApplication", + "m2:GetApplicationVersion", + "m2:GetBatchJobExecution", + "m2:GetDataSetDetails", + "m2:GetDataSetImportTask", + "m2:GetDeployment", + "m2:GetEnvironment", + "m2:ListApplications", + "m2:ListApplicationVersions", + "m2:ListBatchJobDefinitions", + "m2:ListBatchJobExecutions", + "m2:ListDataSetImportHistory", + "m2:ListDataSets", + "m2:ListDeployments", + "m2:ListEngineVersions", + "m2:ListEnvironments", + "m2:ListTagsForResource", + "machinelearning:Describe*", + "machinelearning:Get*", + "macie2:BatchGetCustomDataIdentifiers", + "macie2:DescribeBuckets", + "macie2:DescribeClassificationJob", + "macie2:DescribeOrganizationConfiguration", + "macie2:GetAdministratorAccount", + "macie2:GetAllowList", + "macie2:GetAutomatedDiscoveryConfiguration", + "macie2:GetBucketStatistics", + "macie2:GetClassificationExportConfiguration", + "macie2:GetClassificationScope", + "macie2:GetCustomDataIdentifier", + "macie2:GetFindings", + "macie2:GetFindingsFilter", + "macie2:GetFindingsPublicationConfiguration", + "macie2:GetFindingStatistics", + "macie2:GetInvitationsCount", + "macie2:GetMacieSession", + "macie2:GetMember", + "macie2:GetResourceProfile", + "macie2:GetRevealConfiguration", + "macie2:GetSensitiveDataOccurrencesAvailability", + "macie2:GetSensitivityInspectionTemplate", + "macie2:GetUsageStatistics", + "macie2:GetUsageTotals", + "macie2:ListAllowLists", + "macie2:ListAutomatedDiscoveryAccounts", + "macie2:ListClassificationJobs", + "macie2:ListClassificationScopes", + "macie2:ListCustomDataIdentifiers", + "macie2:ListFindings", + "macie2:ListFindingsFilters", + "macie2:ListInvitations", + "macie2:ListMembers", + "macie2:ListOrganizationAdminAccounts", + "macie2:ListResourceProfileArtifacts", + "macie2:ListResourceProfileDetections", + "macie2:ListSensitivityInspectionTemplates", + "macie2:ListTagsForResource", + "macie2:SearchResources", + "managedblockchain:GetMember", + "managedblockchain:GetNetwork", + "managedblockchain:GetNode", + "managedblockchain:GetProposal", + "managedblockchain:ListInvitations", + "managedblockchain:ListMembers", + "managedblockchain:ListNetworks", + "managedblockchain:ListNodes", + "managedblockchain:ListProposals", + "managedblockchain:ListProposalVotes", + "managedblockchain:ListTagsForResource", + "mediaconnect:DescribeFlow", + "mediaconnect:DescribeOffering", + "mediaconnect:DescribeReservation", + "mediaconnect:ListEntitlements", + "mediaconnect:ListFlows", + "mediaconnect:ListOfferings", + "mediaconnect:ListReservations", + "mediaconnect:ListTagsForResource", + "mediaconvert:DescribeEndpoints", + "mediaconvert:Get*", + "mediaconvert:List*", + "medialive:DescribeChannel", + "medialive:DescribeInput", + "medialive:DescribeInputDevice", + "medialive:DescribeInputDeviceThumbnail", + "medialive:DescribeInputSecurityGroup", + "medialive:DescribeMultiplex", + "medialive:DescribeMultiplexProgram", + "medialive:DescribeOffering", + "medialive:DescribeReservation", + "medialive:DescribeSchedule", + "medialive:GetCloudWatchAlarmTemplate", + "medialive:GetCloudWatchAlarmTemplateGroup", + "medialive:GetEventBridgeRuleTemplate", + "medialive:GetEventBridgeRuleTemplateGroup", + "medialive:GetSignalMap", + "medialive:ListChannels", + "medialive:ListCloudWatchAlarmTemplateGroups", + "medialive:ListCloudWatchAlarmTemplates", + "medialive:ListEventBridgeRuleTemplateGroups", + "medialive:ListEventBridgeRuleTemplates", + "medialive:ListInputDevices", + "medialive:ListInputDeviceTransfers", + "medialive:ListInputs", + "medialive:ListInputSecurityGroups", + "medialive:ListMultiplexes", + "medialive:ListMultiplexPrograms", + "medialive:ListOfferings", + "medialive:ListReservations", + "medialive:ListSignalMaps", + "medialive:ListTagsForResource", + "mediapackage-vod:Describe*", + "mediapackage-vod:List*", + "mediapackage:Describe*", + "mediapackage:List*", + "mediapackagev2:GetChannel", + "mediapackagev2:GetChannelGroup", + "mediapackagev2:GetChannelPolicy", + "mediapackagev2:GetHeadObject", + "mediapackagev2:GetObject", + "mediapackagev2:GetOriginEndpoint", + "mediapackagev2:GetOriginEndpointPolicy", + "mediapackagev2:ListChannelGroups", + "mediapackagev2:ListChannels", + "mediapackagev2:ListOriginEndpoints", + "mediapackagev2:ListTagsForResource", + "mediastore:DescribeContainer", + "mediastore:DescribeObject", + "mediastore:GetContainerPolicy", + "mediastore:GetCorsPolicy", + "mediastore:GetLifecyclePolicy", + "mediastore:GetMetricPolicy", + "mediastore:GetObject", + "mediastore:ListContainers", + "mediastore:ListItems", + "mediastore:ListTagsForResource", + "memorydb:DescribeClusters", + "memorydb:DescribeParameterGroups", + "memorydb:DescribeParameters", + "memorydb:ListTags", + "mgh:Describe*", + "mgh:GetHomeRegion", + "mgh:List*", + "mgn:DescribeJobLogItems", + "mgn:DescribeJobs", + "mgn:DescribeLaunchConfigurationTemplates", + "mgn:DescribeReplicationConfigurationTemplates", + "mgn:DescribeSourceServers", + "mgn:DescribeVcenterClients", + "mgn:GetLaunchConfiguration", + "mgn:GetReplicationConfiguration", + "mgn:ListApplications", + "mgn:ListSourceServerActions", + "mgn:ListTemplateActions", + "mgn:ListWaves", + "mobileanalytics:Get*", + "mobiletargeting:Get*", + "mobiletargeting:List*", + "monitron:GetProject", + "monitron:GetProjectAdminUser", + "monitron:ListProjects", + "monitron:ListTagsForResource", + "mq:Describe*", + "mq:List*", + "network-firewall:DescribeFirewall", + "network-firewall:DescribeFirewallPolicy", + "network-firewall:DescribeLoggingConfiguration", + "network-firewall:DescribeResourcePolicy", + "network-firewall:DescribeRuleGroup", + "network-firewall:DescribeRuleGroupMetadata", + "network-firewall:DescribeTLSInspectionConfiguration", + "network-firewall:ListFirewallPolicies", + "network-firewall:ListFirewalls", + "network-firewall:ListRuleGroups", + "network-firewall:ListTagsForResource", + "network-firewall:ListTLSInspectionConfigurations", + "networkmanager:DescribeGlobalNetworks", + "networkmanager:GetConnectAttachment", + "networkmanager:GetConnections", + "networkmanager:GetConnectPeer", + "networkmanager:GetConnectPeerAssociations", + "networkmanager:GetCoreNetwork", + "networkmanager:GetCoreNetworkChangeEvents", + "networkmanager:GetCoreNetworkChangeSet", + "networkmanager:GetCoreNetworkPolicy", + "networkmanager:GetCustomerGatewayAssociations", + "networkmanager:GetDevices", + "networkmanager:GetLinkAssociations", + "networkmanager:GetLinks", + "networkmanager:GetNetworkResourceCounts", + "networkmanager:GetNetworkResourceRelationships", + "networkmanager:GetNetworkResources", + "networkmanager:GetNetworkRoutes", + "networkmanager:GetNetworkTelemetry", + "networkmanager:GetResourcePolicy", + "networkmanager:GetRouteAnalysis", + "networkmanager:GetSites", + "networkmanager:GetSiteToSiteVpnAttachment", + "networkmanager:GetTransitGatewayConnectPeerAssociations", + "networkmanager:GetTransitGatewayPeering", + "networkmanager:GetTransitGatewayRegistrations", + "networkmanager:GetTransitGatewayRouteTableAttachment", + "networkmanager:GetVpcAttachment", + "networkmanager:ListAttachments", + "networkmanager:ListConnectPeers", + "networkmanager:ListCoreNetworkPolicyVersions", + "networkmanager:ListCoreNetworks", + "networkmanager:ListPeerings", + "networkmanager:ListTagsForResource", + "nimble:GetEula", + "nimble:GetFeatureMap", + "nimble:GetLaunchProfile", + "nimble:GetLaunchProfileDetails", + "nimble:GetLaunchProfileInitialization", + "nimble:GetLaunchProfileMember", + "nimble:GetStreamingImage", + "nimble:GetStreamingSession", + "nimble:GetStudio", + "nimble:GetStudioComponent", + "nimble:GetStudioMember", + "nimble:ListEulaAcceptances", + "nimble:ListEulas", + "nimble:ListLaunchProfileMembers", + "nimble:ListLaunchProfiles", + "nimble:ListStreamingImages", + "nimble:ListStreamingSessions", + "nimble:ListStudioComponents", + "nimble:ListStudioMembers", + "nimble:ListStudios", + "nimble:ListTagsForResource", + "notifications-contacts:GetEmailContact", + "notifications-contacts:ListEmailContacts", + "notifications-contacts:ListTagsForResource", + "notifications:GetEventRule", + "notifications:GetNotificationConfiguration", + "notifications:GetNotificationEvent", + "notifications:ListChannels", + "notifications:ListEventRules", + "notifications:ListNotificationConfigurations", + "notifications:ListNotificationEvents", + "notifications:ListNotificationHubs", + "notifications:ListTagsForResource", + "oam:GetLink", + "oam:GetSink", + "oam:GetSinkPolicy", + "oam:ListAttachedLinks", + "oam:ListLinks", + "oam:ListSinks", + "omics:Get*", + "omics:List*", + "one:GetDeviceConfigurationTemplate", + "one:GetDeviceInstance", + "one:GetDeviceInstanceConfiguration", + "one:GetSite", + "one:GetSiteAddress", + "one:ListDeviceConfigurationTemplates", + "one:ListDeviceInstances", + "one:ListSites", + "one:ListUsers", + "opsworks-cm:Describe*", + "opsworks-cm:List*", + "opsworks:Describe*", + "opsworks:Get*", + "organizations:Describe*", + "organizations:List*", + "osis:GetPipeline", + "osis:GetPipelineBlueprint", + "osis:GetPipelineChangeProgress", + "osis:ListPipelineBlueprints", + "osis:ListPipelines", + "osis:ListTagsForResource", + "outposts:Get*", + "outposts:List*", + "payment-cryptography:GetAlias", + "payment-cryptography:GetKey", + "payment-cryptography:GetPublicKeyCertificate", + "payment-cryptography:ListAliases", + "payment-cryptography:ListKeys", + "payment-cryptography:ListTagsForResource", + "payments:GetPaymentInstrument", + "payments:GetPaymentStatus", + "payments:ListPaymentInstruments", + "payments:ListPaymentPreferences", + "payments:ListTagsForResource", + "pca-connector-ad:GetConnector", + "pca-connector-ad:GetDirectoryRegistration", + "pca-connector-ad:GetServicePrincipalName", + "pca-connector-ad:GetTemplate", + "pca-connector-ad:GetTemplateGroupAccessControlEntry", + "pca-connector-ad:ListConnectors", + "pca-connector-ad:ListDirectoryRegistrations", + "pca-connector-ad:ListServicePrincipalNames", + "pca-connector-ad:ListTagsForResource", + "pca-connector-ad:ListTemplateGroupAccessControlEntries", + "pca-connector-ad:ListTemplates", + "pca-connector-scep:GetChallengeMetadata", + "pca-connector-scep:GetConnector", + "pca-connector-scep:ListChallengeMetadata", + "pca-connector-scep:ListConnectors", + "pca-connector-scep:ListTagsForResource", + "personalize:Describe*", + "personalize:Get*", + "personalize:List*", + "pi:DescribeDimensionKeys", + "pi:GetDimensionKeyDetails", + "pi:GetResourceMetadata", + "pi:GetResourceMetrics", + "pi:ListAvailableResourceDimensions", + "pi:ListAvailableResourceMetrics", + "pipes:DescribePipe", + "pipes:ListPipes", + "pipes:ListTagsForResource", + "polly:Describe*", + "polly:Get*", + "polly:List*", + "polly:SynthesizeSpeech", + "pricing:DescribeServices", + "pricing:GetAttributeValues", + "pricing:GetPriceListFileUrl", + "pricing:GetProducts", + "pricing:ListPriceLists", + "proton:GetDeployment", + "proton:GetEnvironment", + "proton:GetEnvironmentTemplate", + "proton:GetEnvironmentTemplateVersion", + "proton:GetService", + "proton:GetServiceInstance", + "proton:GetServiceTemplate", + "proton:GetServiceTemplateVersion", + "proton:ListDeployments", + "proton:ListEnvironmentAccountConnections", + "proton:ListEnvironments", + "proton:ListEnvironmentTemplates", + "proton:ListServiceInstances", + "proton:ListServices", + "proton:ListServiceTemplates", + "proton:ListTagsForResource", + "purchase-orders:GetPurchaseOrder", + "purchase-orders:ListPurchaseOrderInvoices", + "purchase-orders:ListPurchaseOrders", + "purchase-orders:ViewPurchaseOrders", + "qbusiness:GetApplication", + "qbusiness:GetChatControlsConfiguration", + "qbusiness:GetDataSource", + "qbusiness:GetGroup", + "qbusiness:GetIndex", + "qbusiness:GetPlugin", + "qbusiness:GetRetriever", + "qbusiness:GetUser", + "qbusiness:GetWebExperience", + "qbusiness:ListApplications", + "qbusiness:ListDataSources", + "qbusiness:ListDataSourceSyncJobs", + "qbusiness:ListGroups", + "qbusiness:ListIndices", + "qbusiness:ListPlugins", + "qbusiness:ListRetrievers", + "qbusiness:ListSubscriptions", + "qbusiness:ListTagsForResource", + "qbusiness:ListWebExperiences", + "qldb:DescribeJournalKinesisStream", + "qldb:DescribeJournalS3Export", + "qldb:DescribeLedger", + "qldb:GetBlock", + "qldb:GetDigest", + "qldb:GetRevision", + "qldb:ListJournalKinesisStreamsForLedger", + "qldb:ListJournalS3Exports", + "qldb:ListJournalS3ExportsForLedger", + "qldb:ListLedgers", + "qldb:ListTagsForResource", + "ram:Get*", + "ram:List*", + "rbin:GetRule", + "rbin:ListRules", + "rbin:ListTagsForResource", + "rds:Describe*", + "rds:Download*", + "rds:List*", + "redshift-serverless:GetCustomDomainAssociation", + "redshift-serverless:GetEndpointAccess", + "redshift-serverless:GetNamespace", + "redshift-serverless:GetRecoveryPoint", + "redshift-serverless:GetResourcePolicy", + "redshift-serverless:GetScheduledAction", + "redshift-serverless:GetSnapshot", + "redshift-serverless:GetTableRestoreStatus", + "redshift-serverless:GetUsageLimit", + "redshift-serverless:GetWorkgroup", + "redshift-serverless:ListCustomDomainAssociations", + "redshift-serverless:ListEndpointAccess", + "redshift-serverless:ListNamespaces", + "redshift-serverless:ListRecoveryPoints", + "redshift-serverless:ListScheduledActions", + "redshift-serverless:ListSnapshotCopyConfigurations", + "redshift-serverless:ListSnapshots", + "redshift-serverless:ListTableRestoreStatus", + "redshift-serverless:ListTagsForResource", + "redshift-serverless:ListUsageLimits", + "redshift-serverless:ListWorkgroups", + "redshift:Describe*", + "redshift:GetReservedNodeExchangeOfferings", + "redshift:ListRecommendations", + "redshift:View*", + "refactor-spaces:GetApplication", + "refactor-spaces:GetEnvironment", + "refactor-spaces:GetResourcePolicy", + "refactor-spaces:GetRoute", + "refactor-spaces:GetService", + "refactor-spaces:ListApplications", + "refactor-spaces:ListEnvironments", + "refactor-spaces:ListEnvironmentVpcs", + "refactor-spaces:ListRoutes", + "refactor-spaces:ListServices", + "refactor-spaces:ListTagsForResource", + "rekognition:CompareFaces", + "rekognition:DescribeDataset", + "rekognition:DescribeProjects", + "rekognition:DescribeProjectVersions", + "rekognition:DescribeStreamProcessor", + "rekognition:Detect*", + "rekognition:GetCelebrityInfo", + "rekognition:GetCelebrityRecognition", + "rekognition:GetContentModeration", + "rekognition:GetFaceDetection", + "rekognition:GetFaceSearch", + "rekognition:GetLabelDetection", + "rekognition:GetPersonTracking", + "rekognition:GetSegmentDetection", + "rekognition:GetTextDetection", + "rekognition:List*", + "rekognition:RecognizeCelebrities", + "rekognition:Search*", + "resiliencehub:DescribeApp", + "resiliencehub:DescribeAppAssessment", + "resiliencehub:DescribeAppVersion", + "resiliencehub:DescribeAppVersionAppComponent", + "resiliencehub:DescribeAppVersionResource", + "resiliencehub:DescribeAppVersionResourcesResolutionStatus", + "resiliencehub:DescribeAppVersionTemplate", + "resiliencehub:DescribeDraftAppVersionResourcesImportStatus", + "resiliencehub:DescribeResiliencyPolicy", + "resiliencehub:DescribeResourceGroupingRecommendationTask", + "resiliencehub:ListAlarmRecommendations", + "resiliencehub:ListAppAssessmentComplianceDrifts", + "resiliencehub:ListAppAssessmentResourceDrifts", + "resiliencehub:ListAppAssessments", + "resiliencehub:ListAppComponentCompliances", + "resiliencehub:ListAppComponentRecommendations", + "resiliencehub:ListAppInputSources", + "resiliencehub:ListApps", + "resiliencehub:ListAppVersionAppComponents", + "resiliencehub:ListAppVersionResourceMappings", + "resiliencehub:ListAppVersionResources", + "resiliencehub:ListAppVersions", + "resiliencehub:ListRecommendationTemplates", + "resiliencehub:ListResiliencyPolicies", + "resiliencehub:ListResourceGroupingRecommendations", + "resiliencehub:ListSopRecommendations", + "resiliencehub:ListSuggestedResiliencyPolicies", + "resiliencehub:ListTagsForResource", + "resiliencehub:ListTestRecommendations", + "resiliencehub:ListUnsupportedAppVersionResources", + "resource-explorer-2:BatchGetView", + "resource-explorer-2:GetDefaultView", + "resource-explorer-2:GetIndex", + "resource-explorer-2:GetView", + "resource-explorer-2:ListIndexes", + "resource-explorer-2:ListSupportedResourceTypes", + "resource-explorer-2:ListTagsForResource", + "resource-explorer-2:ListViews", + "resource-explorer-2:Search", + "resource-groups:Get*", + "resource-groups:List*", + "resource-groups:Search*", + "robomaker:BatchDescribe*", + "robomaker:Describe*", + "robomaker:Get*", + "robomaker:List*", + "route53-recovery-cluster:Get*", + "route53-recovery-cluster:ListRoutingControls", + "route53-recovery-control-config:Describe*", + "route53-recovery-control-config:GetResourcePolicy", + "route53-recovery-control-config:List*", + "route53-recovery-readiness:Get*", + "route53-recovery-readiness:List*", + "route53:Get*", + "route53:List*", + "route53:Test*", + "route53domains:Check*", + "route53domains:Get*", + "route53domains:List*", + "route53domains:View*", + "route53profiles:GetProfile", + "route53profiles:GetProfileAssociation", + "route53profiles:GetProfileResourceAssociation", + "route53profiles:ListProfileAssociations", + "route53profiles:ListProfileResourceAssociations", + "route53profiles:ListProfiles", + "route53profiles:ListTagsForResource", + "route53resolver:Get*", + "route53resolver:List*", + "rum:GetAppMonitor", + "rum:GetAppMonitorData", + "rum:ListAppMonitors", + "s3-object-lambda:GetObject", + "s3-object-lambda:GetObjectAcl", + "s3-object-lambda:GetObjectLegalHold", + "s3-object-lambda:GetObjectRetention", + "s3-object-lambda:GetObjectTagging", + "s3-object-lambda:GetObjectVersion", + "s3-object-lambda:GetObjectVersionAcl", + "s3-object-lambda:GetObjectVersionTagging", + "s3-object-lambda:ListBucket", + "s3-object-lambda:ListBucketMultipartUploads", + "s3-object-lambda:ListBucketVersions", + "s3-object-lambda:ListMultipartUploadParts", + "s3-outposts:GetAccessPoint", + "s3-outposts:GetAccessPointPolicy", + "s3-outposts:GetBucket", + "s3-outposts:GetBucketPolicy", + "s3-outposts:GetBucketTagging", + "s3-outposts:GetBucketVersioning", + "s3-outposts:GetLifecycleConfiguration", + "s3-outposts:GetObject", + "s3-outposts:GetObjectTagging", + "s3-outposts:GetObjectVersion", + "s3-outposts:GetObjectVersionForReplication", + "s3-outposts:GetObjectVersionTagging", + "s3-outposts:GetReplicationConfiguration", + "s3-outposts:ListAccessPoints", + "s3-outposts:ListBucket", + "s3-outposts:ListBucketMultipartUploads", + "s3-outposts:ListBucketVersions", + "s3-outposts:ListEndpoints", + "s3-outposts:ListMultipartUploadParts", + "s3-outposts:ListOutpostsWithS3", + "s3-outposts:ListRegionalBuckets", + "s3-outposts:ListSharedEndpoints", + "s3:DescribeJob", + "s3:Get*", + "s3:List*", + "sagemaker-groundtruth-synthetic:GetAccountDetails", + "sagemaker-groundtruth-synthetic:GetBatch", + "sagemaker-groundtruth-synthetic:GetProject", + "sagemaker-groundtruth-synthetic:ListBatchDataTransfers", + "sagemaker-groundtruth-synthetic:ListBatchSummaries", + "sagemaker-groundtruth-synthetic:ListProjectDataTransfers", + "sagemaker-groundtruth-synthetic:ListProjectSummaries", + "sagemaker:Describe*", + "sagemaker:GetSearchSuggestions", + "sagemaker:List*", + "sagemaker:Search", + "savingsplans:DescribeSavingsPlanRates", + "savingsplans:DescribeSavingsPlans", + "savingsplans:DescribeSavingsPlansOfferingRates", + "savingsplans:DescribeSavingsPlansOfferings", + "savingsplans:ListTagsForResource", + "scheduler:GetSchedule", + "scheduler:GetScheduleGroup", + "scheduler:ListScheduleGroups", + "scheduler:ListSchedules", + "scheduler:ListTagsForResource", + "schemas:Describe*", + "schemas:Get*", + "schemas:List*", + "schemas:Search*", + "sdb:Get*", + "sdb:List*", + "sdb:Select*", + "secretsmanager:Describe*", + "secretsmanager:GetResourcePolicy", + "secretsmanager:List*", + "securityhub:BatchGetAutomationRules", + "securityhub:BatchGetConfigurationPolicyAssociations", + "securityhub:BatchGetControlEvaluations", + "securityhub:BatchGetSecurityControls", + "securityhub:BatchGetStandardsControlAssociations", + "securityhub:Describe*", + "securityhub:Get*", + "securityhub:List*", + "securitylake:GetDataLakeExceptionSubscription", + "securitylake:GetDataLakeOrganizationConfiguration", + "securitylake:GetDataLakeSources", + "securitylake:GetSubscriber", + "securitylake:ListDataLakeExceptions", + "securitylake:ListDataLakes", + "securitylake:ListLogSources", + "securitylake:ListSubscribers", + "securitylake:ListTagsForResource", + "serverlessrepo:Get*", + "serverlessrepo:List*", + "serverlessrepo:SearchApplications", + "servicecatalog:Describe*", + "servicecatalog:GetApplication", + "servicecatalog:GetAttributeGroup", + "servicecatalog:List*", + "servicecatalog:Scan*", + "servicecatalog:Search*", + "servicediscovery:DiscoverInstances", + "servicediscovery:DiscoverInstancesRevision", + "servicediscovery:Get*", + "servicediscovery:List*", + "servicequotas:GetAssociationForServiceQuotaTemplate", + "servicequotas:GetAWSDefaultServiceQuota", + "servicequotas:GetRequestedServiceQuotaChange", + "servicequotas:GetServiceQuota", + "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", + "servicequotas:ListAWSDefaultServiceQuotas", + "servicequotas:ListRequestedServiceQuotaChangeHistory", + "servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota", + "servicequotas:ListServiceQuotaIncreaseRequestsInTemplate", + "servicequotas:ListServiceQuotas", + "servicequotas:ListServices", + "ses:BatchGetMetricData", + "ses:Describe*", + "ses:Get*", + "ses:List*", + "shield:Describe*", + "shield:Get*", + "shield:List*", + "signer:DescribeSigningJob", + "signer:GetSigningPlatform", + "signer:GetSigningProfile", + "signer:ListProfilePermissions", + "signer:ListSigningJobs", + "signer:ListSigningPlatforms", + "signer:ListSigningProfiles", + "signer:ListTagsForResource", + "signin:ListTrustedIdentityPropagationApplicationsForConsole", + "sms-voice:DescribeAccountAttributes", + "sms-voice:DescribeAccountLimits", + "sms-voice:DescribeConfigurationSets", + "sms-voice:DescribeKeywords", + "sms-voice:DescribeOptedOutNumbers", + "sms-voice:DescribeOptOutLists", + "sms-voice:DescribePhoneNumbers", + "sms-voice:DescribePools", + "sms-voice:DescribeSenderIds", + "sms-voice:DescribeSpendLimits", + "sms-voice:ListPoolOriginationIdentities", + "sms-voice:ListTagsForResource", + "snowball:Describe*", + "snowball:Get*", + "snowball:List*", + "sns:Check*", + "sns:Get*", + "sns:List*", + "sqs:Get*", + "sqs:List*", + "sqs:Receive*", + "ssm-contacts:DescribeEngagement", + "ssm-contacts:DescribePage", + "ssm-contacts:GetContact", + "ssm-contacts:GetContactChannel", + "ssm-contacts:ListContactChannels", + "ssm-contacts:ListContacts", + "ssm-contacts:ListEngagements", + "ssm-contacts:ListPageReceipts", + "ssm-contacts:ListPagesByContact", + "ssm-contacts:ListPagesByEngagement", + "ssm-incidents:GetIncidentRecord", + "ssm-incidents:GetReplicationSet", + "ssm-incidents:GetResourcePolicies", + "ssm-incidents:GetResponsePlan", + "ssm-incidents:GetTimelineEvent", + "ssm-incidents:ListIncidentRecords", + "ssm-incidents:ListRelatedItems", + "ssm-incidents:ListReplicationSets", + "ssm-incidents:ListResponsePlans", + "ssm-incidents:ListTagsForResource", + "ssm-incidents:ListTimelineEvents", + "ssm-sap:GetApplication", + "ssm-sap:GetComponent", + "ssm-sap:GetDatabase", + "ssm-sap:GetOperation", + "ssm-sap:GetResourcePermission", + "ssm-sap:ListApplications", + "ssm-sap:ListComponents", + "ssm-sap:ListDatabases", + "ssm-sap:ListOperationEvents", + "ssm-sap:ListOperations", + "ssm-sap:ListTagsForResource", + "ssm:Describe*", + "ssm:Get*", + "ssm:List*", + "sso-directory:Describe*", + "sso-directory:List*", + "sso-directory:Search*", + "sso:Describe*", + "sso:Get*", + "sso:List*", + "sso:Search*", + "states:Describe*", + "states:GetExecutionHistory", + "states:List*", + "states:ValidateStateMachineDefinition", + "storagegateway:Describe*", + "storagegateway:List*", + "sts:GetAccessKeyInfo", + "sts:GetCallerIdentity", + "sts:GetSessionToken", + "support:DescribeAttachment", + "support:DescribeCases", + "support:DescribeCommunications", + "support:DescribeServices", + "support:DescribeSeverityLevels", + "support:DescribeTrustedAdvisorCheckRefreshStatuses", + "support:DescribeTrustedAdvisorCheckResult", + "support:DescribeTrustedAdvisorChecks", + "support:DescribeTrustedAdvisorCheckSummaries", + "supportplans:GetSupportPlan", + "supportplans:GetSupportPlanUpdateStatus", + "sustainability:GetCarbonFootprintSummary", + "swf:Count*", + "swf:Describe*", + "swf:Get*", + "swf:List*", + "synthetics:Describe*", + "synthetics:Get*", + "synthetics:List*", + "tag:DescribeReportCreation", + "tag:Get*", + "tax:GetExemptions", + "tax:GetTaxInheritance", + "tax:GetTaxInterview", + "tax:GetTaxRegistration", + "tax:GetTaxRegistrationDocument", + "tax:ListTaxRegistrations", + "timestream:DescribeBatchLoadTask", + "timestream:DescribeDatabase", + "timestream:DescribeEndpoints", + "timestream:DescribeTable", + "timestream:ListBatchLoadTasks", + "timestream:ListDatabases", + "timestream:ListMeasures", + "timestream:ListTables", + "timestream:ListTagsForResource", + "tnb:GetSolFunctionInstance", + "tnb:GetSolFunctionPackage", + "tnb:GetSolFunctionPackageContent", + "tnb:GetSolFunctionPackageDescriptor", + "tnb:GetSolNetworkInstance", + "tnb:GetSolNetworkOperation", + "tnb:GetSolNetworkPackage", + "tnb:GetSolNetworkPackageContent", + "tnb:GetSolNetworkPackageDescriptor", + "tnb:ListSolFunctionInstances", + "tnb:ListSolFunctionPackages", + "tnb:ListSolNetworkInstances", + "tnb:ListSolNetworkOperations", + "tnb:ListSolNetworkPackages", + "tnb:ListTagsForResource", + "transcribe:Get*", + "transcribe:List*", + "transfer:Describe*", + "transfer:List*", + "transfer:TestIdentityProvider", + "translate:DescribeTextTranslationJob", + "translate:GetParallelData", + "translate:GetTerminology", + "translate:ListParallelData", + "translate:ListTerminologies", + "translate:ListTextTranslationJobs", + "trustedadvisor:Describe*", + "trustedadvisor:GetOrganizationRecommendation", + "trustedadvisor:GetRecommendation", + "trustedadvisor:ListChecks", + "trustedadvisor:ListOrganizationRecommendationAccounts", + "trustedadvisor:ListOrganizationRecommendationResources", + "trustedadvisor:ListOrganizationRecommendations", + "trustedadvisor:ListRecommendationResources", + "trustedadvisor:ListRecommendations", + "user-subscriptions:ListApplicationClaims", + "user-subscriptions:ListClaims", + "user-subscriptions:ListUserSubscriptions", + "verifiedpermissions:GetIdentitySource", + "verifiedpermissions:GetPolicy", + "verifiedpermissions:GetPolicyStore", + "verifiedpermissions:GetPolicyTemplate", + "verifiedpermissions:GetSchema", + "verifiedpermissions:IsAuthorized", + "verifiedpermissions:IsAuthorizedWithToken", + "verifiedpermissions:ListIdentitySources", + "verifiedpermissions:ListPolicies", + "verifiedpermissions:ListPolicyStores", + "verifiedpermissions:ListPolicyTemplates", + "vpc-lattice:GetAccessLogSubscription", + "vpc-lattice:GetAuthPolicy", + "vpc-lattice:GetListener", + "vpc-lattice:GetResourcePolicy", + "vpc-lattice:GetRule", + "vpc-lattice:GetService", + "vpc-lattice:GetServiceNetwork", + "vpc-lattice:GetServiceNetworkServiceAssociation", + "vpc-lattice:GetServiceNetworkVpcAssociation", + "vpc-lattice:GetTargetGroup", + "vpc-lattice:ListAccessLogSubscriptions", + "vpc-lattice:ListListeners", + "vpc-lattice:ListRules", + "vpc-lattice:ListServiceNetworks", + "vpc-lattice:ListServiceNetworkServiceAssociations", + "vpc-lattice:ListServiceNetworkVpcAssociations", + "vpc-lattice:ListServices", + "vpc-lattice:ListTagsForResource", + "vpc-lattice:ListTargetGroups", + "vpc-lattice:ListTargets", + "waf-regional:Get*", + "waf-regional:List*", + "waf:Get*", + "waf:List*", + "wafv2:CheckCapacity", + "wafv2:Describe*", + "wafv2:Get*", + "wafv2:List*", + "wellarchitected:ExportLens", + "wellarchitected:GetAnswer", + "wellarchitected:GetConsolidatedReport", + "wellarchitected:GetLens", + "wellarchitected:GetLensReview", + "wellarchitected:GetLensReviewReport", + "wellarchitected:GetLensVersionDifference", + "wellarchitected:GetMilestone", + "wellarchitected:GetProfile", + "wellarchitected:GetProfileTemplate", + "wellarchitected:GetReviewTemplate", + "wellarchitected:GetReviewTemplateAnswer", + "wellarchitected:GetReviewTemplateLensReview", + "wellarchitected:GetWorkload", + "wellarchitected:ListAnswers", + "wellarchitected:ListCheckDetails", + "wellarchitected:ListCheckSummaries", + "wellarchitected:ListLenses", + "wellarchitected:ListLensReviewImprovements", + "wellarchitected:ListLensReviews", + "wellarchitected:ListLensShares", + "wellarchitected:ListMilestones", + "wellarchitected:ListNotifications", + "wellarchitected:ListProfileNotifications", + "wellarchitected:ListProfiles", + "wellarchitected:ListProfileShares", + "wellarchitected:ListReviewTemplateAnswers", + "wellarchitected:ListReviewTemplates", + "wellarchitected:ListShareInvitations", + "wellarchitected:ListTagsForResource", + "wellarchitected:ListTemplateShares", + "wellarchitected:ListWorkloads", + "wellarchitected:ListWorkloadShares", + "workdocs:CheckAlias", + "workdocs:Describe*", + "workdocs:Get*", + "workmail:Describe*", + "workmail:Get*", + "workmail:List*", + "workmail:Search*", + "workspaces-web:GetBrowserSettings", + "workspaces-web:GetIdentityProvider", + "workspaces-web:GetNetworkSettings", + "workspaces-web:GetPortal", + "workspaces-web:GetPortalServiceProviderMetadata", + "workspaces-web:GetTrustStore", + "workspaces-web:GetUserAccessLoggingSettings", + "workspaces-web:GetUserSettings", + "workspaces-web:ListBrowserSettings", + "workspaces-web:ListIdentityProviders", + "workspaces-web:ListNetworkSettings", + "workspaces-web:ListPortals", + "workspaces-web:ListTagsForResource", + "workspaces-web:ListTrustStores", + "workspaces-web:ListUserAccessLoggingSettings", + "workspaces-web:ListUserSettings", + "workspaces:Describe*", + "xray:BatchGet*", + "xray:Get*" + ], + "Resource": "*" + } + ] +} \ No newline at end of file diff --git a/data/json/ViewOnlyAccess/v20/policy.json b/data/json/ViewOnlyAccess/v20/policy.json new file mode 100644 index 00000000..d6f95f0f --- /dev/null +++ b/data/json/ViewOnlyAccess/v20/policy.json @@ -0,0 +1,369 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "GeneralViewOnlyAccessStatement", + "Effect": "Allow", + "Action": [ + "acm:ListCertificates", + "athena:List*", + "autoscaling:Describe*", + "aws-marketplace:ViewSubscriptions", + "backup:DescribeBackupJob", + "backup:DescribeBackupVault", + "backup:DescribeCopyJob", + "backup:DescribeFramework", + "backup:DescribeGlobalSettings", + "backup:DescribeProtectedResource", + "backup:DescribeRecoveryPoint", + "backup:DescribeRegionSettings", + "backup:DescribeReportJob", + "backup:DescribeReportPlan", + "backup:DescribeRestoreJob", + "backup:GetSupportedResourceTypes", + "backup:ListBackupJobs", + "backup:ListBackupPlanTemplates", + "backup:ListBackupPlanVersions", + "backup:ListBackupPlans", + "backup:ListBackupSelections", + "backup:ListBackupVaults", + "backup:ListCopyJobs", + "backup:ListFrameworks", + "backup:ListLegalHolds", + "backup:ListProtectedResources", + "backup:ListProtectedResourcesByBackupVault", + "backup:ListRecoveryPointsByBackupVault", + "backup:ListRecoveryPointsByLegalHold", + "backup:ListRecoveryPointsByResource", + "backup:ListReportJobs", + "backup:ListReportPlans", + "backup:ListRestoreJobs", + "backup:ListTags", + "batch:ListJobs", + "bedrock:ListCustomModels", + "bedrock:ListTagsForResource", + "clouddirectory:ListAppliedSchemaArns", + "clouddirectory:ListDevelopmentSchemaArns", + "clouddirectory:ListDirectories", + "clouddirectory:ListPublishedSchemaArns", + "cloudformation:DescribeStacks", + "cloudformation:List*", + "cloudfront:List*", + "cloudsearch:DescribeDomains", + "cloudsearch:List*", + "cloudtrail:DescribeTrails", + "cloudtrail:ListTrails", + "cloudtrail:LookupEvents", + "cloudwatch:Get*", + "cloudwatch:List*", + "codebuild:ListBuilds*", + "codebuild:ListProjects", + "codecommit:List*", + "codedeploy:BatchGetApplicationRevisions", + "codedeploy:BatchGetApplications", + "codedeploy:BatchGetDeploymentGroups", + "codedeploy:BatchGetDeploymentInstances", + "codedeploy:BatchGetDeploymentTargets", + "codedeploy:BatchGetDeployments", + "codedeploy:BatchGetOnPremisesInstances", + "codedeploy:Get*", + "codedeploy:List*", + "codepipeline:ListPipelines", + "codestar:List*", + "cognito-identity:ListIdentities", + "cognito-identity:ListIdentityPools", + "cognito-idp:List*", + "cognito-sync:ListDatasets", + "comprehend:Describe*", + "comprehend:List*", + "config:Describe*", + "config:List*", + "connect:List*", + "cost-optimization-hub:GetPreferences", + "cost-optimization-hub:GetRecommendation", + "cost-optimization-hub:ListEnrollmentStatuses", + "cost-optimization-hub:ListRecommendationSummaries", + "cost-optimization-hub:ListRecommendations", + "databrew:ListJobs", + "databrew:ListProjects", + "datapipeline:DescribePipelines", + "datapipeline:GetAccountLimits", + "datapipeline:ListPipelines", + "dax:DescribeClusters", + "dax:DescribeDefaultParameters", + "dax:DescribeEvents", + "dax:DescribeParameterGroups", + "dax:DescribeParameters", + "dax:DescribeSubnetGroups", + "dax:ListTags", + "devicefarm:List*", + "directconnect:Describe*", + "discovery:List*", + "dms:List*", + "ds:DescribeDirectories", + "dynamodb:DescribeBackup", + "dynamodb:DescribeContinuousBackups", + "dynamodb:DescribeGlobalTable", + "dynamodb:DescribeGlobalTableSettings", + "dynamodb:DescribeLimits", + "dynamodb:DescribeReservedCapacity", + "dynamodb:DescribeReservedCapacityOfferings", + "dynamodb:DescribeStream", + "dynamodb:DescribeTable", + "dynamodb:DescribeTimeToLive", + "dynamodb:ListBackups", + "dynamodb:ListExports", + "dynamodb:ListGlobalTables", + "dynamodb:ListStreams", + "dynamodb:ListTables", + "dynamodb:ListTagsOfResource", + "ec2:DescribeAccountAttributes", + "ec2:DescribeAddresses", + "ec2:DescribeAvailabilityZones", + "ec2:DescribeBundleTasks", + "ec2:DescribeCarrierGateways", + "ec2:DescribeClassicLinkInstances", + "ec2:DescribeConversionTasks", + "ec2:DescribeCustomerGateways", + "ec2:DescribeDhcpOptions", + "ec2:DescribeExportTasks", + "ec2:DescribeFlowLogs", + "ec2:DescribeHost*", + "ec2:DescribeIdFormat", + "ec2:DescribeIdentityIdFormat", + "ec2:DescribeImage*", + "ec2:DescribeImport*", + "ec2:DescribeInstance*", + "ec2:DescribeInternetGateways", + "ec2:DescribeKeyPairs", + "ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations", + "ec2:DescribeLocalGatewayRouteTableVpcAssociations", + "ec2:DescribeLocalGatewayRouteTables", + "ec2:DescribeLocalGatewayVirtualInterfaceGroups", + "ec2:DescribeLocalGatewayVirtualInterfaces", + "ec2:DescribeLocalGateways", + "ec2:DescribeMovingAddresses", + "ec2:DescribeNatGateways", + "ec2:DescribeNetwork*", + "ec2:DescribePlacementGroups", + "ec2:DescribePrefixLists", + "ec2:DescribeRegions", + "ec2:DescribeReserved*", + "ec2:DescribeRouteTables", + "ec2:DescribeSecurityGroupRules", + "ec2:DescribeSecurityGroups", + "ec2:DescribeSnapshot*", + "ec2:DescribeSpot*", + "ec2:DescribeSubnets", + "ec2:DescribeTags", + "ec2:DescribeVolume*", + "ec2:DescribeVpc*", + "ec2:DescribeVpnGateways", + "ec2:SearchLocalGatewayRoutes", + "ecr:DescribeRegistry", + "ecr:DescribeRepositories", + "ecr:ListImages", + "ecs:Describe*", + "ecs:List*", + "eks:ListTagsForResource", + "elastic-inference:DescribeAcceleratorOfferings", + "elastic-inference:DescribeAcceleratorTypes", + "elastic-inference:DescribeAccelerators", + "elastic-inference:ListTagsForResource", + "elasticache:Describe*", + "elasticbeanstalk:DescribeApplicationVersions", + "elasticbeanstalk:DescribeApplications", + "elasticbeanstalk:DescribeEnvironments", + "elasticbeanstalk:ListAvailableSolutionStacks", + "elasticfilesystem:DescribeFileSystems", + "elasticloadbalancing:DescribeInstanceHealth", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeLoadBalancerAttributes", + "elasticloadbalancing:DescribeTargetGroups", + "elasticloadbalancing:DescribeTargetHealth", + "elasticmapreduce:List*", + "elastictranscoder:List*", + "emr-serverless:ListApplications", + "es:DescribeElasticsearchDomain", + "es:DescribeElasticsearchDomains", + "es:ListDomainNames", + "events:ListRuleNamesByTarget", + "events:ListRules", + "events:ListTargetsByRule", + "firehose:DescribeDeliveryStream", + "firehose:List*", + "fsx:DescribeFileSystems", + "gamelift:List*", + "glacier:List*", + "glue:GetTags", + "greengrass:List*", + "iam:GetAccountSummary", + "iam:GetLoginProfile", + "iam:List*", + "importexport:ListJobs", + "inspector:List*", + "iot:List*", + "kafka:ListClusters", + "kendra:ListDataSources", + "kendra:ListTagsForResource", + "kinesis:ListStreams", + "kinesisanalytics:ListApplications", + "kinesisanalytics:ListTagsForResource", + "kms:ListKeys", + "kms:ListResourceTags", + "lambda:List*", + "lex:GetBotAliases", + "lex:GetBotChannelAssociations", + "lex:GetBotVersions", + "lex:GetBots", + "lex:GetIntentVersions", + "lex:GetIntents", + "lex:GetSlotTypeVersions", + "lex:GetSlotTypes", + "lex:GetUtterancesView", + "lightsail:GetBlueprints", + "lightsail:GetBundles", + "lightsail:GetInstanceSnapshots", + "lightsail:GetInstances", + "lightsail:GetKeyPair", + "lightsail:GetRegions", + "lightsail:GetStaticIps", + "lightsail:IsVpcPeered", + "logs:Describe*", + "logs:ListTagsForResource", + "lookoutvision:ListModelPackagingJobs", + "lookoutvision:ListModels", + "lookoutvision:ListProjects", + "machinelearning:Describe*", + "mediaconnect:ListEntitlements", + "mediaconnect:ListFlows", + "mediaconnect:ListOfferings", + "mediaconnect:ListReservations", + "mobiletargeting:GetApplicationSettings", + "mobiletargeting:GetCampaigns", + "mobiletargeting:GetImportJobs", + "mobiletargeting:GetSegments", + "oam:ListAttachedLinks", + "oam:ListLinks", + "oam:ListSinks", + "opsworks-cm:Describe*", + "opsworks:Describe*", + "organizations:List*", + "outposts:GetOutpost", + "outposts:GetOutpostInstanceTypes", + "outposts:ListOutposts", + "outposts:ListSites", + "outposts:ListTagsForResource", + "polly:Describe*", + "polly:List*", + "profile:ListDomains", + "profile:ListIntegrations", + "rds:Describe*", + "redshift-serverless:ListTagsForResource", + "redshift-serverless:ListWorkgroups", + "redshift:DescribeClusters", + "redshift:DescribeEvents", + "redshift:ViewQueriesInConsole", + "resource-explorer-2:GetDefaultView", + "resource-explorer-2:GetIndex", + "resource-explorer-2:ListIndexes", + "resource-explorer-2:ListSupportedResourceTypes", + "resource-explorer-2:ListTagsForResource", + "resource-explorer-2:ListViews", + "route53:Get*", + "route53:List*", + "route53domains:List*", + "route53resolver:Get*", + "route53resolver:List*", + "s3:ListAllMyBuckets", + "s3:ListBucket", + "s3:ListMultiRegionAccessPoints", + "sagemaker:Describe*", + "sagemaker:List*", + "sdb:List*", + "servicecatalog:List*", + "ses:DescribeActiveReceiptRuleSet", + "ses:List*", + "ses:ListDedicatedIpPools", + "shield:List*", + "sns:List*", + "sqs:GetQueueAttributes", + "sqs:GetQueueUrl", + "sqs:ListDeadLetterSourceQueues", + "sqs:ListMessageMoveTasks", + "sqs:ListQueueTags", + "sqs:ListQueues", + "ssm:ListAssociations", + "ssm:ListDocuments", + "states:ListActivities", + "states:ListStateMachineAliases", + "states:ListStateMachineVersions", + "states:ListStateMachines", + "storagegateway:ListGateways", + "storagegateway:ListLocalDisks", + "storagegateway:ListVolumeRecoveryPoints", + "storagegateway:ListVolumes", + "swf:List*", + "trustedadvisor:Describe*", + "waf-regional:List*", + "waf:List*", + "wafv2:List*", + "workdocs:DescribeAvailableDirectories", + "workdocs:DescribeInstances", + "workmail:Describe*", + "workspaces:Describe*" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Sid": "APIGatewayAccess", + "Action": [ + "apigateway:GET" + ], + "Resource": [ + "arn:aws:apigateway:*::/apis", + "arn:aws:apigateway:*::/apis/*/authorizers/*", + "arn:aws:apigateway:*::/apis/*/authorizers", + "arn:aws:apigateway:*::/apis/*/cors", + "arn:aws:apigateway:*::/apis/*/deployments/*", + "arn:aws:apigateway:*::/apis/*/deployments", + "arn:aws:apigateway:*::/apis/*/exports/*", + "arn:aws:apigateway:*::/apis/*/integrations/*", + "arn:aws:apigateway:*::/apis/*/integrations", + "arn:aws:apigateway:*::/apis/*/models/*", + "arn:aws:apigateway:*::/apis/*/models", + "arn:aws:apigateway:*::/apis/*/routes/*", + "arn:aws:apigateway:*::/apis/*/routes", + "arn:aws:apigateway:*::/apis/*/stages", + "arn:aws:apigateway:*::/apis/*/stages/*", + "arn:aws:apigateway:*::/clientcertificates", + "arn:aws:apigateway:*::/clientcertificates/*", + "arn:aws:apigateway:*::/domainnames", + "arn:aws:apigateway:*::/domainnames/*/apimappings", + "arn:aws:apigateway:*::/restapis", + "arn:aws:apigateway:*::/restapis/*/authorizers/*", + "arn:aws:apigateway:*::/restapis/*/authorizers", + "arn:aws:apigateway:*::/restapis/*/deployments/*", + "arn:aws:apigateway:*::/restapis/*/deployments", + "arn:aws:apigateway:*::/restapis/*/documentation/parts/*", + "arn:aws:apigateway:*::/restapis/*/documentation/parts", + "arn:aws:apigateway:*::/restapis/*/documentation/versions/*", + "arn:aws:apigateway:*::/restapis/*/documentation/versions", + "arn:aws:apigateway:*::/restapis/*/gatewayresponses/*", + "arn:aws:apigateway:*::/restapis/*/gatewayresponses", + "arn:aws:apigateway:*::/restapis/*/models/*", + "arn:aws:apigateway:*::/restapis/*/models", + "arn:aws:apigateway:*::/restapis/*/requestvalidators", + "arn:aws:apigateway:*::/restapis/*/requestvalidators/*", + "arn:aws:apigateway:*::/restapis/*/resources/*", + "arn:aws:apigateway:*::/restapis/*/resources", + "arn:aws:apigateway:*::/restapis/*/stages", + "arn:aws:apigateway:*::/restapis/*/stages/*", + "arn:aws:apigateway:*::/tags/*", + "arn:aws:apigateway:*::/vpclinks" + ] + } + ] +} \ No newline at end of file diff --git a/package-lock.json b/package-lock.json index b88422b4..76147d76 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "aws-iam-managed-policies", - "version": "0.0.247", + "version": "0.0.248", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "aws-iam-managed-policies", - "version": "0.0.247", + "version": "0.0.248", "license": "MIT", "dependencies": { "deep-object-diff": "^1.1.9" diff --git a/package.json b/package.json index c35c9e74..98be1eaa 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "aws-iam-managed-policies", - "version": "0.0.247", + "version": "0.0.248", "description": "Provides AWS IAM Managed Policies historical data as a convenient npm package that can be used in other OSS projects.", "main": "./dist/index.js", "types": "./dist/index.d.ts", diff --git a/src/managedPolicies.json b/src/managedPolicies.json index bae71ed2..a31050a4 100644 --- a/src/managedPolicies.json +++ b/src/managedPolicies.json @@ -179,8 +179,8 @@ }, "ReadOnlyAccess": { "arn": "arn:aws:iam::aws:policy/ReadOnlyAccess", - "latestVersionId": "v119", - "versionsCount": 119, + "latestVersionId": "v120", + "versionsCount": 120, "versions": { "v2": { "createdDate": "2015-04-21T16:37:57.000Z", @@ -96530,10 +96530,2368 @@ } ] } + }, + "v120": { + "createdDate": "2015-02-06T18:39:48.000Z", + "document": { + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "ReadOnlyActions", + "Effect": "Allow", + "Action": [ + "a4b:Get*", + "a4b:List*", + "a4b:Search*", + "access-analyzer:GetAccessPreview", + "access-analyzer:GetAnalyzedResource", + "access-analyzer:GetAnalyzer", + "access-analyzer:GetArchiveRule", + "access-analyzer:GetFinding", + "access-analyzer:GetGeneratedPolicy", + "access-analyzer:ListAccessPreviewFindings", + "access-analyzer:ListAccessPreviews", + "access-analyzer:ListAnalyzedResources", + "access-analyzer:ListAnalyzers", + "access-analyzer:ListArchiveRules", + "access-analyzer:ListFindings", + "access-analyzer:ListPolicyGenerations", + "access-analyzer:ListTagsForResource", + "access-analyzer:ValidatePolicy", + "account:GetAccountInformation", + "account:GetAlternateContact", + "account:GetChallengeQuestions", + "account:GetContactInformation", + "account:GetPrimaryEmail", + "account:GetRegionOptStatus", + "account:ListRegions", + "acm-pca:Describe*", + "acm-pca:Get*", + "acm-pca:List*", + "acm:Describe*", + "acm:Get*", + "acm:List*", + "airflow:ListEnvironments", + "airflow:ListTagsForResource", + "amplify:GetApp", + "amplify:GetBranch", + "amplify:GetDomainAssociation", + "amplify:GetJob", + "amplify:ListApps", + "amplify:ListBranches", + "amplify:ListDomainAssociations", + "amplify:ListJobs", + "aoss:BatchGetCollection", + "aoss:BatchGetLifecyclePolicy", + "aoss:BatchGetVpcEndpoint", + "aoss:GetAccessPolicy", + "aoss:GetAccountSettings", + "aoss:GetPoliciesStats", + "aoss:GetSecurityConfig", + "aoss:GetSecurityPolicy", + "aoss:ListAccessPolicies", + "aoss:ListCollections", + "aoss:ListLifecyclePolicies", + "aoss:ListSecurityConfigs", + "aoss:ListSecurityPolicies", + "aoss:ListTagsForResource", + "aoss:ListVpcEndpoints", + "apigateway:GET", + "appconfig:GetApplication", + "appconfig:GetConfiguration", + "appconfig:GetConfigurationProfile", + "appconfig:GetDeployment", + "appconfig:GetDeploymentStrategy", + "appconfig:GetEnvironment", + "appconfig:GetHostedConfigurationVersion", + "appconfig:ListApplications", + "appconfig:ListConfigurationProfiles", + "appconfig:ListDeployments", + "appconfig:ListDeploymentStrategies", + "appconfig:ListEnvironments", + "appconfig:ListHostedConfigurationVersions", + "appconfig:ListTagsForResource", + "appfabric:GetAppAuthorization", + "appfabric:GetAppBundle", + "appfabric:GetIngestion", + "appfabric:GetIngestionDestination", + "appfabric:ListAppAuthorizations", + "appfabric:ListAppBundles", + "appfabric:ListIngestionDestinations", + "appfabric:ListIngestions", + "appfabric:ListTagsForResource", + "appflow:DescribeConnector", + "appflow:DescribeConnectorEntity", + "appflow:DescribeConnectorFields", + "appflow:DescribeConnectorProfiles", + "appflow:DescribeConnectors", + "appflow:DescribeFlow", + "appflow:DescribeFlowExecution", + "appflow:DescribeFlowExecutionRecords", + "appflow:DescribeFlows", + "appflow:ListConnectorEntities", + "appflow:ListConnectorFields", + "appflow:ListConnectors", + "appflow:ListFlows", + "appflow:ListTagsForResource", + "application-autoscaling:Describe*", + "application-autoscaling:ListTagsForResource", + "application-signals:BatchGetServiceLevelObjectiveBudgetReport", + "application-signals:GetService", + "application-signals:GetServiceLevelObjective", + "application-signals:ListServiceDependencies", + "application-signals:ListServiceDependents", + "application-signals:ListServiceLevelObjectives", + "application-signals:ListServiceOperations", + "application-signals:ListServices", + "application-signals:ListTagsForResource", + "applicationinsights:Describe*", + "applicationinsights:List*", + "appmesh:Describe*", + "appmesh:List*", + "apprunner:DescribeAutoScalingConfiguration", + "apprunner:DescribeCustomDomains", + "apprunner:DescribeObservabilityConfiguration", + "apprunner:DescribeService", + "apprunner:DescribeVpcConnector", + "apprunner:DescribeVpcIngressConnection", + "apprunner:DescribeWebAclForService", + "apprunner:ListAssociatedServicesForWebAcl", + "apprunner:ListAutoScalingConfigurations", + "apprunner:ListConnections", + "apprunner:ListObservabilityConfigurations", + "apprunner:ListOperations", + "apprunner:ListServices", + "apprunner:ListServicesForAutoScalingConfiguration", + "apprunner:ListTagsForResource", + "apprunner:ListVpcConnectors", + "apprunner:ListVpcIngressConnections", + "appstream:Describe*", + "appstream:List*", + "appstudio:GetAccountStatus", + "appstudio:GetEnablementJobStatus", + "appsync:Get*", + "appsync:List*", + "aps:DescribeAlertManagerDefinition", + "aps:DescribeLoggingConfiguration", + "aps:DescribeRuleGroupsNamespace", + "aps:DescribeScraper", + "aps:DescribeWorkspace", + "aps:GetAlertManagerSilence", + "aps:GetAlertManagerStatus", + "aps:GetDefaultScraperConfiguration", + "aps:GetLabels", + "aps:GetMetricMetadata", + "aps:GetSeries", + "aps:ListAlertManagerAlertGroups", + "aps:ListAlertManagerAlerts", + "aps:ListAlertManagerReceivers", + "aps:ListAlertManagerSilences", + "aps:ListAlerts", + "aps:ListRuleGroupsNamespaces", + "aps:ListRules", + "aps:ListScrapers", + "aps:ListTagsForResource", + "aps:ListWorkspaces", + "aps:QueryMetrics", + "arc-zonal-shift:GetManagedResource", + "arc-zonal-shift:ListAutoshifts", + "arc-zonal-shift:ListManagedResources", + "arc-zonal-shift:ListZonalShifts", + "artifact:GetReport", + "artifact:GetReportMetadata", + "artifact:GetTermForReport", + "artifact:ListReports", + "athena:Batch*", + "athena:Get*", + "athena:List*", + "auditmanager:GetAccountStatus", + "auditmanager:GetAssessment", + "auditmanager:GetAssessmentFramework", + "auditmanager:GetAssessmentReportUrl", + "auditmanager:GetChangeLogs", + "auditmanager:GetControl", + "auditmanager:GetDelegations", + "auditmanager:GetEvidence", + "auditmanager:GetEvidenceByEvidenceFolder", + "auditmanager:GetEvidenceFolder", + "auditmanager:GetEvidenceFoldersByAssessment", + "auditmanager:GetEvidenceFoldersByAssessmentControl", + "auditmanager:GetOrganizationAdminAccount", + "auditmanager:GetServicesInScope", + "auditmanager:GetSettings", + "auditmanager:ListAssessmentFrameworks", + "auditmanager:ListAssessmentReports", + "auditmanager:ListAssessments", + "auditmanager:ListControls", + "auditmanager:ListKeywordsForDataSource", + "auditmanager:ListNotifications", + "auditmanager:ListTagsForResource", + "auditmanager:ValidateAssessmentReportIntegrity", + "autoscaling-plans:Describe*", + "autoscaling-plans:GetScalingPlanResourceForecastData", + "autoscaling:Describe*", + "autoscaling:GetPredictiveScalingForecast", + "aws-portal:View*", + "backup-gateway:GetBandwidthRateLimitSchedule", + "backup-gateway:GetGateway", + "backup-gateway:GetHypervisor", + "backup-gateway:GetHypervisorPropertyMappings", + "backup-gateway:GetVirtualMachine", + "backup-gateway:ListGateways", + "backup-gateway:ListHypervisors", + "backup-gateway:ListTagsForResource", + "backup-gateway:ListVirtualMachines", + "backup:Describe*", + "backup:Get*", + "backup:List*", + "batch:Describe*", + "batch:List*", + "bedrock:GetAgent", + "bedrock:GetAgentActionGroup", + "bedrock:GetAgentAlias", + "bedrock:GetAgentKnowledgeBase", + "bedrock:GetAgentVersion", + "bedrock:GetCustomModel", + "bedrock:GetDataSource", + "bedrock:GetEvaluationJob", + "bedrock:GetFlow", + "bedrock:GetFlowAlias", + "bedrock:GetFlowVersion", + "bedrock:GetFoundationModel", + "bedrock:GetFoundationModelAvailability", + "bedrock:GetGuardrail", + "bedrock:GetInferenceProfile", + "bedrock:GetIngestionJob", + "bedrock:GetKnowledgeBase", + "bedrock:GetModelCustomizationJob", + "bedrock:GetModelInvocationLoggingConfiguration", + "bedrock:GetPrompt", + "bedrock:GetProvisionedModelThroughput", + "bedrock:GetUseCaseForModelAccess", + "bedrock:ListAgentActionGroups", + "bedrock:ListAgentAliases", + "bedrock:ListAgentKnowledgeBases", + "bedrock:ListAgents", + "bedrock:ListAgentVersions", + "bedrock:ListCustomModels", + "bedrock:ListDataSources", + "bedrock:ListEvaluationJobs", + "bedrock:ListFlows", + "bedrock:ListFlowAliases", + "bedrock:ListFlowVersions", + "bedrock:ListFoundationModelAgreementOffers", + "bedrock:ListFoundationModels", + "bedrock:ListGuardrails", + "bedrock:ListInferenceProfiles", + "bedrock:ListIngestionJobs", + "bedrock:ListKnowledgeBases", + "bedrock:ListModelCustomizationJobs", + "bedrock:ListPrompts", + "bedrock:ListProvisionedModelThroughputs", + "billing:GetBillingData", + "billing:GetBillingDetails", + "billing:GetBillingNotifications", + "billing:GetBillingPreferences", + "billing:GetContractInformation", + "billing:GetCredits", + "billing:GetIAMAccessPreference", + "billing:GetSellerOfRecord", + "billing:ListBillingViews", + "billingconductor:GetBillingGroupCostReport", + "billingconductor:ListAccountAssociations", + "billingconductor:ListBillingGroupCostReports", + "billingconductor:ListBillingGroups", + "billingconductor:ListCustomLineItems", + "billingconductor:ListCustomLineItemVersions", + "billingconductor:ListPricingPlans", + "billingconductor:ListPricingPlansAssociatedWithPricingRule", + "billingconductor:ListPricingRules", + "billingconductor:ListPricingRulesAssociatedToPricingPlan", + "billingconductor:ListResourcesAssociatedToCustomLineItem", + "billingconductor:ListTagsForResource", + "braket:GetDevice", + "braket:GetJob", + "braket:GetQuantumTask", + "braket:SearchDevices", + "braket:SearchJobs", + "braket:SearchQuantumTasks", + "budgets:Describe*", + "budgets:ListTagsForResource", + "budgets:View*", + "cassandra:Select", + "ce:DescribeCostCategoryDefinition", + "ce:DescribeNotificationSubscription", + "ce:DescribeReport", + "ce:GetAnomalies", + "ce:GetAnomalyMonitors", + "ce:GetAnomalySubscriptions", + "ce:GetApproximateUsageRecords", + "ce:GetCostAndUsage", + "ce:GetCostAndUsageWithResources", + "ce:GetCostCategories", + "ce:GetCostForecast", + "ce:GetDimensionValues", + "ce:GetPreferences", + "ce:GetReservationCoverage", + "ce:GetReservationPurchaseRecommendation", + "ce:GetReservationUtilization", + "ce:GetRightsizingRecommendation", + "ce:GetSavingsPlanPurchaseRecommendationDetails", + "ce:GetSavingsPlansCoverage", + "ce:GetSavingsPlansPurchaseRecommendation", + "ce:GetSavingsPlansUtilization", + "ce:GetSavingsPlansUtilizationDetails", + "ce:GetTags", + "ce:GetUsageForecast", + "ce:ListCostAllocationTagBackfillHistory", + "ce:ListCostAllocationTags", + "ce:ListCostCategoryDefinitions", + "ce:ListSavingsPlansPurchaseRecommendationGeneration", + "ce:ListTagsForResource", + "chatbot:Describe*", + "chatbot:Get*", + "chatbot:ListMicrosoftTeamsChannelConfigurations", + "chatbot:ListMicrosoftTeamsConfiguredTeams", + "chatbot:ListMicrosoftTeamsUserIdentities", + "chatbot:ListTagsForResource", + "chime:Get*", + "chime:List*", + "chime:Retrieve*", + "chime:Search*", + "chime:Validate*", + "cleanrooms-ml:GetAudienceGenerationJob", + "cleanrooms-ml:GetAudienceModel", + "cleanrooms-ml:GetConfiguredAudienceModel", + "cleanrooms-ml:GetConfiguredAudienceModelPolicy", + "cleanrooms-ml:GetTrainingDataset", + "cleanrooms-ml:ListAudienceExportJobs", + "cleanrooms-ml:ListAudienceGenerationJobs", + "cleanrooms-ml:ListAudienceModels", + "cleanrooms-ml:ListConfiguredAudienceModels", + "cleanrooms-ml:ListTagsForResource", + "cleanrooms-ml:ListTrainingDatasets", + "cleanrooms:BatchGetCollaborationAnalysisTemplate", + "cleanrooms:BatchGetSchema", + "cleanrooms:GetAnalysisTemplate", + "cleanrooms:GetCollaboration", + "cleanrooms:GetCollaborationAnalysisTemplate", + "cleanrooms:GetConfiguredAudienceModelAssociation", + "cleanrooms:GetConfiguredTable", + "cleanrooms:GetConfiguredTableAnalysisRule", + "cleanrooms:GetConfiguredTableAssociation", + "cleanrooms:GetMembership", + "cleanrooms:GetProtectedQuery", + "cleanrooms:GetSchema", + "cleanrooms:GetSchemaAnalysisRule", + "cleanrooms:ListAnalysisTemplates", + "cleanrooms:ListCollaborationAnalysisTemplates", + "cleanrooms:ListCollaborationConfiguredAudienceModelAssociations", + "cleanrooms:ListCollaborations", + "cleanrooms:ListConfiguredTableAssociations", + "cleanrooms:ListConfiguredTables", + "cleanrooms:ListMembers", + "cleanrooms:ListMemberships", + "cleanrooms:ListProtectedQueries", + "cleanrooms:ListSchemas", + "cleanrooms:ListTagsForResource", + "cloud9:Describe*", + "cloud9:List*", + "clouddirectory:BatchRead", + "clouddirectory:Get*", + "clouddirectory:List*", + "clouddirectory:LookupPolicy", + "cloudformation:Describe*", + "cloudformation:Detect*", + "cloudformation:Estimate*", + "cloudformation:Get*", + "cloudformation:List*", + "cloudformation:ValidateTemplate", + "cloudfront-keyvaluestore:Describe*", + "cloudfront-keyvaluestore:Get*", + "cloudfront-keyvaluestore:List*", + "cloudfront:Describe*", + "cloudfront:Get*", + "cloudfront:List*", + "cloudhsm:Describe*", + "cloudhsm:List*", + "cloudsearch:Describe*", + "cloudsearch:List*", + "cloudtrail:Describe*", + "cloudtrail:Get*", + "cloudtrail:List*", + "cloudtrail:LookupEvents", + "cloudwatch:Describe*", + "cloudwatch:GenerateQuery", + "cloudwatch:Get*", + "cloudwatch:List*", + "codeartifact:DescribeDomain", + "codeartifact:DescribePackage", + "codeartifact:DescribePackageVersion", + "codeartifact:DescribeRepository", + "codeartifact:GetAuthorizationToken", + "codeartifact:GetDomainPermissionsPolicy", + "codeartifact:GetPackageVersionAsset", + "codeartifact:GetPackageVersionReadme", + "codeartifact:GetRepositoryEndpoint", + "codeartifact:GetRepositoryPermissionsPolicy", + "codeartifact:ListDomains", + "codeartifact:ListPackages", + "codeartifact:ListPackageVersionAssets", + "codeartifact:ListPackageVersionDependencies", + "codeartifact:ListPackageVersions", + "codeartifact:ListRepositories", + "codeartifact:ListRepositoriesInDomain", + "codeartifact:ListTagsForResource", + "codeartifact:ReadFromRepository", + "codebuild:BatchGet*", + "codebuild:DescribeCodeCoverages", + "codebuild:DescribeTestCases", + "codebuild:List*", + "codecatalyst:GetBillingAuthorization", + "codecatalyst:GetConnection", + "codecatalyst:GetPendingConnection", + "codecatalyst:ListConnections", + "codecatalyst:ListIamRolesForConnection", + "codecatalyst:ListTagsForResource", + "codecommit:BatchGet*", + "codecommit:Describe*", + "codecommit:Get*", + "codecommit:GitPull", + "codecommit:List*", + "codedeploy:BatchGet*", + "codedeploy:Get*", + "codedeploy:List*", + "codeguru-profiler:Describe*", + "codeguru-profiler:Get*", + "codeguru-profiler:List*", + "codeguru-reviewer:Describe*", + "codeguru-reviewer:Get*", + "codeguru-reviewer:List*", + "codepipeline:Get*", + "codepipeline:List*", + "codestar-connections:GetConnection", + "codestar-connections:GetHost", + "codestar-connections:GetRepositoryLink", + "codestar-connections:GetRepositorySyncStatus", + "codestar-connections:GetResourceSyncStatus", + "codestar-connections:GetSyncConfiguration", + "codestar-connections:ListConnections", + "codestar-connections:ListHosts", + "codestar-connections:ListRepositoryLinks", + "codestar-connections:ListRepositorySyncDefinitions", + "codestar-connections:ListSyncConfigurations", + "codestar-connections:ListTagsForResource", + "codestar-notifications:describeNotificationRule", + "codestar-notifications:listEventTypes", + "codestar-notifications:listNotificationRules", + "codestar-notifications:listTagsForResource", + "codestar-notifications:ListTargets", + "codestar:Describe*", + "codestar:Get*", + "codestar:List*", + "codestar:Verify*", + "cognito-identity:Describe*", + "cognito-identity:GetCredentialsForIdentity", + "cognito-identity:GetIdentityPoolAnalytics", + "cognito-identity:GetIdentityPoolDailyAnalytics", + "cognito-identity:GetIdentityPoolRoles", + "cognito-identity:GetIdentityProviderDailyAnalytics", + "cognito-identity:GetOpenIdToken", + "cognito-identity:GetOpenIdTokenForDeveloperIdentity", + "cognito-identity:List*", + "cognito-identity:Lookup*", + "cognito-idp:AdminGet*", + "cognito-idp:AdminList*", + "cognito-idp:Describe*", + "cognito-idp:Get*", + "cognito-idp:List*", + "cognito-sync:Describe*", + "cognito-sync:Get*", + "cognito-sync:List*", + "cognito-sync:QueryRecords", + "comprehend:BatchDetect*", + "comprehend:Classify*", + "comprehend:Contains*", + "comprehend:Describe*", + "comprehend:Detect*", + "comprehend:List*", + "compute-optimizer:DescribeRecommendationExportJobs", + "compute-optimizer:GetAutoScalingGroupRecommendations", + "compute-optimizer:GetEBSVolumeRecommendations", + "compute-optimizer:GetEC2InstanceRecommendations", + "compute-optimizer:GetEC2RecommendationProjectedMetrics", + "compute-optimizer:GetECSServiceRecommendationProjectedMetrics", + "compute-optimizer:GetECSServiceRecommendations", + "compute-optimizer:GetEffectiveRecommendationPreferences", + "compute-optimizer:GetEnrollmentStatus", + "compute-optimizer:GetEnrollmentStatusesForOrganization", + "compute-optimizer:GetLambdaFunctionRecommendations", + "compute-optimizer:GetLicenseRecommendations", + "compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics", + "compute-optimizer:GetRDSDatabaseRecommendations", + "compute-optimizer:GetRecommendationPreferences", + "compute-optimizer:GetRecommendationSummaries", + "config:BatchGetAggregateResourceConfig", + "config:BatchGetResourceConfig", + "config:Deliver*", + "config:Describe*", + "config:Get*", + "config:List*", + "config:SelectAggregateResourceConfig", + "config:SelectResourceConfig", + "connect:Describe*", + "connect:GetContactAttributes", + "connect:GetCurrentMetricData", + "connect:GetCurrentUserData", + "connect:GetFederationToken", + "connect:GetMetricData", + "connect:GetMetricDataV2", + "connect:GetTaskTemplate", + "connect:GetTrafficDistribution", + "connect:List*", + "consoleapp:GetDeviceIdentity", + "consoleapp:ListDeviceIdentities", + "consolidatedbilling:GetAccountBillingRole", + "consolidatedbilling:ListLinkedAccounts", + "controlcatalog:ListCommonControls", + "controlcatalog:ListDomains", + "controlcatalog:ListObjectives", + "cost-optimization-hub:GetPreferences", + "cost-optimization-hub:GetRecommendation", + "cost-optimization-hub:ListEnrollmentStatuses", + "cost-optimization-hub:ListRecommendations", + "cost-optimization-hub:ListRecommendationSummaries", + "cur:GetClassicReport", + "cur:GetClassicReportPreferences", + "cur:GetUsageReport", + "customer-verification:GetCustomerVerificationDetails", + "customer-verification:GetCustomerVerificationEligibility", + "databrew:DescribeDataset", + "databrew:DescribeJob", + "databrew:DescribeJobRun", + "databrew:DescribeProject", + "databrew:DescribeRecipe", + "databrew:DescribeRuleset", + "databrew:DescribeSchedule", + "databrew:ListDatasets", + "databrew:ListJobRuns", + "databrew:ListJobs", + "databrew:ListProjects", + "databrew:ListRecipes", + "databrew:ListRecipeVersions", + "databrew:ListRulesets", + "databrew:ListSchedules", + "databrew:ListTagsForResource", + "dataexchange:Get*", + "dataexchange:List*", + "datapipeline:Describe*", + "datapipeline:EvaluateExpression", + "datapipeline:Get*", + "datapipeline:List*", + "datapipeline:QueryObjects", + "datapipeline:Validate*", + "datasync:Describe*", + "datasync:List*", + "datazone:GetAsset", + "datazone:GetAssetType", + "datazone:GetDataProduct", + "datazone:GetDataSource", + "datazone:GetDataSourceRun", + "datazone:GetDomain", + "datazone:GetDomainSharingPolicy", + "datazone:GetDomainUnit", + "datazone:GetEnvironment", + "datazone:GetEnvironmentAction", + "datazone:GetEnvironmentBlueprint", + "datazone:GetEnvironmentBlueprintConfiguration", + "datazone:GetEnvironmentProfile", + "datazone:GetFormType", + "datazone:GetGlossary", + "datazone:GetGlossaryTerm", + "datazone:GetGroupProfile", + "datazone:GetLineageNode", + "datazone:GetListing", + "datazone:GetListing", + "datazone:GetMetadataGenerationRun", + "datazone:GetProject", + "datazone:GetProjectProfile", + "datazone:GetSubscription", + "datazone:GetSubscriptionEligibility", + "datazone:GetSubscriptionGrant", + "datazone:GetSubscriptionRequestDetails", + "datazone:GetSubscriptionTarget", + "datazone:GetTimeSeriesDataPoint", + "datazone:GetUserProfile", + "datazone:ListAccountEnvironments", + "datazone:ListAssetRevisions", + "datazone:ListDataProductRevisions", + "datazone:ListDataSourceRunActivities", + "datazone:ListDataSourceRuns", + "datazone:ListDataSources", + "datazone:ListDomains", + "datazone:ListDomainUnitsForParent", + "datazone:ListEntityOwners", + "datazone:ListEnvironmentActions", + "datazone:ListEnvironmentBlueprintConfigurations", + "datazone:ListEnvironmentBlueprintConfigurationSummaries", + "datazone:ListEnvironmentBlueprints", + "datazone:ListEnvironmentProfiles", + "datazone:ListEnvironments", + "datazone:ListGroupsForUser", + "datazone:ListLineageNodeHistory", + "datazone:ListNotifications", + "datazone:ListPolicyGrants", + "datazone:ListProjectMemberships", + "datazone:ListProjectProfiles", + "datazone:ListProjects", + "datazone:ListSubscriptionGrants", + "datazone:ListSubscriptionRequests", + "datazone:ListSubscriptions", + "datazone:ListSubscriptionTargets", + "datazone:ListTagsForResource", + "datazone:ListTimeSeriesDataPoints", + "datazone:Search", + "datazone:SearchGroupProfiles", + "datazone:SearchListings", + "datazone:SearchTypes", + "datazone:SearchUserProfiles", + "dax:BatchGetItem", + "dax:Describe*", + "dax:GetItem", + "dax:ListTags", + "dax:Query", + "dax:Scan", + "deadline:BatchGetJobEntity", + "deadline:GetApplicationVersion", + "deadline:GetBudget", + "deadline:GetFarm", + "deadline:GetFleet", + "deadline:GetJob", + "deadline:GetLicenseEndpoint", + "deadline:GetMonitor", + "deadline:GetQueue", + "deadline:GetQueueEnvironment", + "deadline:GetQueueFleetAssociation", + "deadline:GetSession", + "deadline:GetSessionAction", + "deadline:GetSessionsStatisticsAggregation", + "deadline:GetStep", + "deadline:GetStorageProfile", + "deadline:GetStorageProfileForQueue", + "deadline:GetTask", + "deadline:GetWorker", + "deadline:ListAvailableMeteredProducts", + "deadline:ListBudgets", + "deadline:ListFarmMembers", + "deadline:ListFarms", + "deadline:ListFleetMembers", + "deadline:ListFleets", + "deadline:ListJobMembers", + "deadline:ListJobs", + "deadline:ListLicenseEndpoints", + "deadline:ListMeteredProducts", + "deadline:ListMonitors", + "deadline:ListQueueEnvironments", + "deadline:ListQueueFleetAssociations", + "deadline:ListQueueMembers", + "deadline:ListQueues", + "deadline:ListSessionActions", + "deadline:ListSessions", + "deadline:ListSessionsForWorker", + "deadline:ListStepConsumers", + "deadline:ListStepDependencies", + "deadline:ListSteps", + "deadline:ListStorageProfiles", + "deadline:ListStorageProfilesForQueue", + "deadline:ListTagsForResource", + "deadline:ListTasks", + "deadline:ListWorkers", + "deadline:SearchJobs", + "deadline:SearchSteps", + "deadline:SearchTasks", + "deadline:SearchWorkers", + "deepcomposer:GetComposition", + "deepcomposer:GetModel", + "deepcomposer:GetSampleModel", + "deepcomposer:ListCompositions", + "deepcomposer:ListModels", + "deepcomposer:ListSampleModels", + "deepcomposer:ListTrainingTopics", + "detective:BatchGetGraphMemberDatasources", + "detective:BatchGetMembershipDatasources", + "detective:Get*", + "detective:List*", + "detective:SearchGraph", + "devicefarm:Get*", + "devicefarm:List*", + "devops-guru:DescribeAccountHealth", + "devops-guru:DescribeAccountOverview", + "devops-guru:DescribeAnomaly", + "devops-guru:DescribeEventSourcesConfig", + "devops-guru:DescribeFeedback", + "devops-guru:DescribeInsight", + "devops-guru:DescribeOrganizationHealth", + "devops-guru:DescribeOrganizationOverview", + "devops-guru:DescribeOrganizationResourceCollectionHealth", + "devops-guru:DescribeResourceCollectionHealth", + "devops-guru:DescribeServiceIntegration", + "devops-guru:GetCostEstimation", + "devops-guru:GetResourceCollection", + "devops-guru:ListAnomaliesForInsight", + "devops-guru:ListAnomalousLogGroups", + "devops-guru:ListEvents", + "devops-guru:ListInsights", + "devops-guru:ListMonitoredResources", + "devops-guru:ListNotificationChannels", + "devops-guru:ListOrganizationInsights", + "devops-guru:ListRecommendations", + "devops-guru:SearchInsights", + "devops-guru:StartCostEstimation", + "directconnect:Describe*", + "discovery:Describe*", + "discovery:Get*", + "discovery:List*", + "dlm:Get*", + "dms:Describe*", + "dms:List*", + "dms:Test*", + "drs:DescribeJobLogItems", + "drs:DescribeJobs", + "drs:DescribeLaunchConfigurationTemplates", + "drs:DescribeRecoveryInstances", + "drs:DescribeRecoverySnapshots", + "drs:DescribeReplicationConfigurationTemplates", + "drs:DescribeSourceNetworks", + "drs:DescribeSourceServers", + "drs:GetFailbackReplicationConfiguration", + "drs:GetLaunchConfiguration", + "drs:GetReplicationConfiguration", + "drs:ListExtensibleSourceServers", + "drs:ListLaunchActions", + "drs:ListStagingAccounts", + "drs:ListTagsForResource", + "ds:Check*", + "ds:Describe*", + "ds:Get*", + "ds:List*", + "ds:Verify*", + "dynamodb:BatchGet*", + "dynamodb:Describe*", + "dynamodb:Get*", + "dynamodb:List*", + "dynamodb:PartiQLSelect", + "dynamodb:Query", + "dynamodb:Scan", + "ec2:Describe*", + "ec2:Get*", + "ec2:ListImagesInRecycleBin", + "ec2:ListSnapshotsInRecycleBin", + "ec2:SearchLocalGatewayRoutes", + "ec2:SearchTransitGatewayRoutes", + "ec2messages:Get*", + "ecr-public:BatchCheckLayerAvailability", + "ecr-public:DescribeImages", + "ecr-public:DescribeImageTags", + "ecr-public:DescribeRegistries", + "ecr-public:DescribeRepositories", + "ecr-public:GetAuthorizationToken", + "ecr-public:GetRegistryCatalogData", + "ecr-public:GetRepositoryCatalogData", + "ecr-public:GetRepositoryPolicy", + "ecr-public:ListTagsForResource", + "ecr:BatchCheck*", + "ecr:BatchGet*", + "ecr:Describe*", + "ecr:Get*", + "ecr:List*", + "ecs:Describe*", + "ecs:List*", + "eks:Describe*", + "eks:List*", + "elastic-inference:DescribeAcceleratorOfferings", + "elastic-inference:DescribeAccelerators", + "elastic-inference:DescribeAcceleratorTypes", + "elastic-inference:ListTagsForResource", + "elasticache:Describe*", + "elasticache:List*", + "elasticbeanstalk:Check*", + "elasticbeanstalk:Describe*", + "elasticbeanstalk:List*", + "elasticbeanstalk:Request*", + "elasticbeanstalk:Retrieve*", + "elasticbeanstalk:Validate*", + "elasticfilesystem:Describe*", + "elasticfilesystem:ListTagsForResource", + "elasticloadbalancing:Describe*", + "elasticmapreduce:Describe*", + "elasticmapreduce:GetBlockPublicAccessConfiguration", + "elasticmapreduce:List*", + "elasticmapreduce:View*", + "elastictranscoder:List*", + "elastictranscoder:Read*", + "elemental-appliances-software:Get*", + "elemental-appliances-software:List*", + "emr-containers:DescribeJobRun", + "emr-containers:DescribeManagedEndpoint", + "emr-containers:DescribeVirtualCluster", + "emr-containers:ListJobRuns", + "emr-containers:ListManagedEndpoints", + "emr-containers:ListTagsForResource", + "emr-containers:ListVirtualClusters", + "emr-serverless:GetApplication", + "emr-serverless:GetDashboardForJobRun", + "emr-serverless:GetJobRun", + "emr-serverless:ListApplications", + "emr-serverless:ListJobRuns", + "emr-serverless:ListTagsForResource", + "es:Describe*", + "es:ESHttpGet", + "es:ESHttpHead", + "es:Get*", + "es:List*", + "events:Describe*", + "events:List*", + "events:Test*", + "evidently:GetExperiment", + "evidently:GetExperimentResults", + "evidently:GetFeature", + "evidently:GetLaunch", + "evidently:GetProject", + "evidently:GetSegment", + "evidently:ListExperiments", + "evidently:ListFeatures", + "evidently:ListLaunches", + "evidently:ListProjects", + "evidently:ListSegmentReferences", + "evidently:ListSegments", + "evidently:ListTagsForResource", + "evidently:TestSegmentPattern", + "firehose:Describe*", + "firehose:List*", + "fis:GetAction", + "fis:GetExperiment", + "fis:GetExperimentTargetAccountConfiguration", + "fis:GetExperimentTemplate", + "fis:GetTargetAccountConfiguration", + "fis:GetTargetResourceType", + "fis:ListActions", + "fis:ListExperimentResolvedTargets", + "fis:ListExperiments", + "fis:ListExperimentTargetAccountConfigurations", + "fis:ListExperimentTemplates", + "fis:ListTagsForResource", + "fis:ListTargetAccountConfigurations", + "fis:ListTargetResourceTypes", + "fms:GetAdminAccount", + "fms:GetAppsList", + "fms:GetComplianceDetail", + "fms:GetNotificationChannel", + "fms:GetPolicy", + "fms:GetProtectionStatus", + "fms:GetProtocolsList", + "fms:GetViolationDetails", + "fms:ListAppsLists", + "fms:ListComplianceStatus", + "fms:ListMemberAccounts", + "fms:ListPolicies", + "fms:ListProtocolsLists", + "fms:ListTagsForResource", + "forecast:DescribeAutoPredictor", + "forecast:DescribeDataset", + "forecast:DescribeDatasetGroup", + "forecast:DescribeDatasetImportJob", + "forecast:DescribeExplainability", + "forecast:DescribeExplainabilityExport", + "forecast:DescribeForecast", + "forecast:DescribeForecastExportJob", + "forecast:DescribeMonitor", + "forecast:DescribePredictor", + "forecast:DescribePredictorBacktestExportJob", + "forecast:DescribeWhatIfAnalysis", + "forecast:DescribeWhatIfForecast", + "forecast:DescribeWhatIfForecastExport", + "forecast:GetAccuracyMetrics", + "forecast:ListDatasetGroups", + "forecast:ListDatasetImportJobs", + "forecast:ListDatasets", + "forecast:ListExplainabilities", + "forecast:ListExplainabilityExports", + "forecast:ListForecastExportJobs", + "forecast:ListForecasts", + "forecast:ListMonitorEvaluations", + "forecast:ListMonitors", + "forecast:ListPredictorBacktestExportJobs", + "forecast:ListPredictors", + "forecast:ListWhatIfAnalyses", + "forecast:ListWhatIfForecastExports", + "forecast:ListWhatIfForecasts", + "forecast:QueryForecast", + "forecast:QueryWhatIfForecast", + "frauddetector:BatchGetVariable", + "frauddetector:DescribeDetector", + "frauddetector:DescribeModelVersions", + "frauddetector:GetBatchImportJobs", + "frauddetector:GetBatchPredictionJobs", + "frauddetector:GetDeleteEventsByEventTypeStatus", + "frauddetector:GetDetectors", + "frauddetector:GetDetectorVersion", + "frauddetector:GetEntityTypes", + "frauddetector:GetEvent", + "frauddetector:GetEventPredictionMetadata", + "frauddetector:GetEventTypes", + "frauddetector:GetExternalModels", + "frauddetector:GetKMSEncryptionKey", + "frauddetector:GetLabels", + "frauddetector:GetListElements", + "frauddetector:GetListsMetadata", + "frauddetector:GetModels", + "frauddetector:GetModelVersion", + "frauddetector:GetOutcomes", + "frauddetector:GetRules", + "frauddetector:GetVariables", + "frauddetector:ListEventPredictions", + "frauddetector:ListTagsForResource", + "freertos:Describe*", + "freertos:List*", + "freetier:GetFreeTierAlertPreference", + "freetier:GetFreeTierUsage", + "fsx:Describe*", + "fsx:List*", + "gamelift:Describe*", + "gamelift:Get*", + "gamelift:List*", + "gamelift:ResolveAlias", + "gamelift:Search*", + "glacier:Describe*", + "glacier:Get*", + "glacier:List*", + "globalaccelerator:Describe*", + "globalaccelerator:List*", + "glue:BatchGetCrawlers", + "glue:BatchGetDevEndpoints", + "glue:BatchGetJobs", + "glue:BatchGetPartition", + "glue:BatchGetTableOptimizer", + "glue:BatchGetTriggers", + "glue:BatchGetWorkflows", + "glue:CheckSchemaVersionValidity", + "glue:GetCatalogImportStatus", + "glue:GetClassifier", + "glue:GetClassifiers", + "glue:GetCrawler", + "glue:GetCrawlerMetrics", + "glue:GetCrawlers", + "glue:GetDatabase", + "glue:GetDatabases", + "glue:GetDataCatalogEncryptionSettings", + "glue:GetDataflowGraph", + "glue:GetDevEndpoint", + "glue:GetDevEndpoints", + "glue:GetJob", + "glue:GetJobBookmark", + "glue:GetJobRun", + "glue:GetJobRuns", + "glue:GetJobs", + "glue:GetMapping", + "glue:GetMLTaskRun", + "glue:GetMLTaskRuns", + "glue:GetMLTransform", + "glue:GetMLTransforms", + "glue:GetPartition", + "glue:GetPartitions", + "glue:GetPlan", + "glue:GetRegistry", + "glue:GetResourcePolicy", + "glue:GetSchema", + "glue:GetSchemaByDefinition", + "glue:GetSchemaVersion", + "glue:GetSchemaVersionsDiff", + "glue:GetSecurityConfiguration", + "glue:GetSecurityConfigurations", + "glue:GetTable", + "glue:GetTableOptimizer", + "glue:GetTables", + "glue:GetTableVersion", + "glue:GetTableVersions", + "glue:GetTags", + "glue:GetTrigger", + "glue:GetTriggers", + "glue:GetUserDefinedFunction", + "glue:GetUserDefinedFunctions", + "glue:GetWorkflow", + "glue:GetWorkflowRun", + "glue:GetWorkflowRunProperties", + "glue:GetWorkflowRuns", + "glue:ListCrawlers", + "glue:ListCrawls", + "glue:ListDevEndpoints", + "glue:ListJobs", + "glue:ListMLTransforms", + "glue:ListRegistries", + "glue:ListSchemas", + "glue:ListSchemaVersions", + "glue:ListTableOptimizerRuns", + "glue:ListTriggers", + "glue:ListWorkflows", + "glue:QuerySchemaVersionMetadata", + "glue:SearchTables", + "grafana:DescribeWorkspace", + "grafana:DescribeWorkspaceAuthentication", + "grafana:DescribeWorkspaceConfiguration", + "grafana:ListPermissions", + "grafana:ListTagsForResource", + "grafana:ListVersions", + "grafana:ListWorkspaces", + "greengrass:DescribeComponent", + "greengrass:Get*", + "greengrass:List*", + "groundstation:DescribeContact", + "groundstation:GetConfig", + "groundstation:GetDataflowEndpointGroup", + "groundstation:GetMinuteUsage", + "groundstation:GetMissionProfile", + "groundstation:GetSatellite", + "groundstation:ListConfigs", + "groundstation:ListContacts", + "groundstation:ListDataflowEndpointGroups", + "groundstation:ListGroundStations", + "groundstation:ListMissionProfiles", + "groundstation:ListSatellites", + "groundstation:ListTagsForResource", + "guardduty:Describe*", + "guardduty:Get*", + "guardduty:List*", + "health:Describe*", + "healthlake:DescribeFHIRDatastore", + "healthlake:DescribeFHIRExportJob", + "healthlake:DescribeFHIRImportJob", + "healthlake:GetCapabilities", + "healthlake:ListFHIRDatastores", + "healthlake:ListFHIRExportJobs", + "healthlake:ListFHIRImportJobs", + "healthlake:ListTagsForResource", + "healthlake:ReadResource", + "healthlake:SearchWithGet", + "healthlake:SearchWithPost", + "iam:Generate*", + "iam:Get*", + "iam:List*", + "iam:Simulate*", + "identity-sync:GetSyncProfile", + "identity-sync:GetSyncTarget", + "identity-sync:ListSyncFilters", + "identitystore-auth:BatchGetSession", + "identitystore-auth:ListSessions", + "identitystore:DescribeGroup", + "identitystore:DescribeGroupMembership", + "identitystore:DescribeUser", + "identitystore:GetGroupId", + "identitystore:GetGroupMembershipId", + "identitystore:GetUserId", + "identitystore:IsMemberInGroups", + "identitystore:ListGroupMemberships", + "identitystore:ListGroupMembershipsForMember", + "identitystore:ListGroups", + "identitystore:ListUsers", + "imagebuilder:Get*", + "imagebuilder:List*", + "importexport:Get*", + "importexport:List*", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", + "inspector2:BatchGetAccountStatus", + "inspector2:BatchGetFreeTrialInfo", + "inspector2:DescribeOrganizationConfiguration", + "inspector2:GetDelegatedAdminAccount", + "inspector2:GetFindingsReportStatus", + "inspector2:GetMember", + "inspector2:ListAccountPermissions", + "inspector2:ListCisScans", + "inspector2:ListCoverage", + "inspector2:ListCoverageStatistics", + "inspector2:ListDelegatedAdminAccounts", + "inspector2:ListFilters", + "inspector2:ListFindingAggregations", + "inspector2:ListFindings", + "inspector2:ListMembers", + "inspector2:ListTagsForResource", + "inspector2:ListUsageTotals", + "internetmonitor:GetHealthEvent", + "internetmonitor:GetInternetEvent", + "internetmonitor:GetMonitor", + "internetmonitor:ListHealthEvents", + "internetmonitor:ListInternetEvents", + "internetmonitor:ListMonitors", + "internetmonitor:ListTagsForResource", + "invoicing:GetInvoiceEmailDeliveryPreferences", + "invoicing:GetInvoicePDF", + "invoicing:ListInvoiceSummaries", + "iot:Describe*", + "iot:Get*", + "iot:List*", + "iot1click:DescribeDevice", + "iot1click:DescribePlacement", + "iot1click:DescribeProject", + "iot1click:GetDeviceMethods", + "iot1click:GetDevicesInPlacement", + "iot1click:ListDeviceEvents", + "iot1click:ListDevices", + "iot1click:ListPlacements", + "iot1click:ListProjects", + "iot1click:ListTagsForResource", + "iotanalytics:Describe*", + "iotanalytics:Get*", + "iotanalytics:List*", + "iotanalytics:SampleChannelData", + "iotevents:DescribeAlarm", + "iotevents:DescribeAlarmModel", + "iotevents:DescribeDetector", + "iotevents:DescribeDetectorModel", + "iotevents:DescribeInput", + "iotevents:DescribeLoggingOptions", + "iotevents:ListAlarmModels", + "iotevents:ListAlarmModelVersions", + "iotevents:ListAlarms", + "iotevents:ListDetectorModels", + "iotevents:ListDetectorModelVersions", + "iotevents:ListDetectors", + "iotevents:ListInputs", + "iotevents:ListTagsForResource", + "iotfleethub:DescribeApplication", + "iotfleethub:ListApplications", + "iotfleetwise:GetCampaign", + "iotfleetwise:GetDecoderManifest", + "iotfleetwise:GetFleet", + "iotfleetwise:GetLoggingOptions", + "iotfleetwise:GetModelManifest", + "iotfleetwise:GetRegisterAccountStatus", + "iotfleetwise:GetSignalCatalog", + "iotfleetwise:GetVehicle", + "iotfleetwise:GetVehicleStatus", + "iotfleetwise:ListCampaigns", + "iotfleetwise:ListDecoderManifestNetworkInterfaces", + "iotfleetwise:ListDecoderManifests", + "iotfleetwise:ListDecoderManifestSignals", + "iotfleetwise:ListFleets", + "iotfleetwise:ListFleetsForVehicle", + "iotfleetwise:ListModelManifestNodes", + "iotfleetwise:ListModelManifests", + "iotfleetwise:ListSignalCatalogNodes", + "iotfleetwise:ListSignalCatalogs", + "iotfleetwise:ListTagsForResource", + "iotfleetwise:ListVehicles", + "iotfleetwise:ListVehiclesInFleet", + "iotroborunner:GetDestination", + "iotroborunner:GetSite", + "iotroborunner:GetWorker", + "iotroborunner:GetWorkerFleet", + "iotroborunner:ListDestinations", + "iotroborunner:ListSites", + "iotroborunner:ListWorkerFleets", + "iotroborunner:ListWorkers", + "iotsitewise:Describe*", + "iotsitewise:Get*", + "iotsitewise:List*", + "iotwireless:GetDestination", + "iotwireless:GetDeviceProfile", + "iotwireless:GetEventConfigurationByResourceTypes", + "iotwireless:GetFuotaTask", + "iotwireless:GetLogLevelsByResourceTypes", + "iotwireless:GetMetricConfiguration", + "iotwireless:GetMetrics", + "iotwireless:GetMulticastGroup", + "iotwireless:GetMulticastGroupSession", + "iotwireless:GetNetworkAnalyzerConfiguration", + "iotwireless:GetPartnerAccount", + "iotwireless:GetPosition", + "iotwireless:GetPositionConfiguration", + "iotwireless:GetPositionEstimate", + "iotwireless:GetResourceEventConfiguration", + "iotwireless:GetResourceLogLevel", + "iotwireless:GetResourcePosition", + "iotwireless:GetServiceEndpoint", + "iotwireless:GetServiceProfile", + "iotwireless:GetWirelessDevice", + "iotwireless:GetWirelessDeviceImportTask", + "iotwireless:GetWirelessDeviceStatistics", + "iotwireless:GetWirelessGateway", + "iotwireless:GetWirelessGatewayCertificate", + "iotwireless:GetWirelessGatewayFirmwareInformation", + "iotwireless:GetWirelessGatewayStatistics", + "iotwireless:GetWirelessGatewayTask", + "iotwireless:GetWirelessGatewayTaskDefinition", + "iotwireless:ListDestinations", + "iotwireless:ListDeviceProfiles", + "iotwireless:ListDevicesForWirelessDeviceImportTask", + "iotwireless:ListEventConfigurations", + "iotwireless:ListFuotaTasks", + "iotwireless:ListMulticastGroups", + "iotwireless:ListMulticastGroupsByFuotaTask", + "iotwireless:ListNetworkAnalyzerConfigurations", + "iotwireless:ListPartnerAccounts", + "iotwireless:ListPositionConfigurations", + "iotwireless:ListQueuedMessages", + "iotwireless:ListServiceProfiles", + "iotwireless:ListTagsForResource", + "iotwireless:ListWirelessDeviceImportTasks", + "iotwireless:ListWirelessDevices", + "iotwireless:ListWirelessGateways", + "iotwireless:ListWirelessGatewayTaskDefinitions", + "ivs:BatchGetChannel", + "ivs:GetChannel", + "ivs:GetComposition", + "ivs:GetEncoderConfiguration", + "ivs:GetIngestConfiguration", + "ivs:GetPublicKey", + "ivs:GetParticipant", + "ivs:GetPlaybackKeyPair", + "ivs:GetPlaybackRestrictionPolicy", + "ivs:GetRecordingConfiguration", + "ivs:GetStage", + "ivs:GetStageSession", + "ivs:GetStreamSession", + "ivs:ListChannels", + "ivs:ListCompositions", + "ivs:ListEncoderConfigurations", + "ivs:ListIngestConfigurations", + "ivs:ListParticipantEvents", + "ivs:ListParticipants", + "ivs:ListPlaybackKeyPairs", + "ivs:ListPlaybackRestrictionPolicies", + "ivs:ListPublicKeys", + "ivs:ListRecordingConfigurations", + "ivs:ListStages", + "ivs:ListStageSessions", + "ivs:ListStreamKeys", + "ivs:ListStreams", + "ivs:ListStreamSessions", + "ivs:ListTagsForResource", + "ivschat:GetLoggingConfiguration", + "ivschat:GetRoom", + "ivschat:ListLoggingConfigurations", + "ivschat:ListRooms", + "ivschat:ListTagsForResource", + "kafka:Describe*", + "kafka:DescribeCluster", + "kafka:DescribeClusterOperation", + "kafka:DescribeClusterV2", + "kafka:DescribeConfiguration", + "kafka:DescribeConfigurationRevision", + "kafka:Get*", + "kafka:GetBootstrapBrokers", + "kafka:GetCompatibleKafkaVersions", + "kafka:List*", + "kafka:ListClusterOperations", + "kafka:ListClusters", + "kafka:ListClustersV2", + "kafka:ListConfigurationRevisions", + "kafka:ListConfigurations", + "kafka:ListKafkaVersions", + "kafka:ListNodes", + "kafka:ListTagsForResource", + "kafkaconnect:DescribeConnector", + "kafkaconnect:DescribeCustomPlugin", + "kafkaconnect:DescribeWorkerConfiguration", + "kafkaconnect:ListConnectors", + "kafkaconnect:ListCustomPlugins", + "kafkaconnect:ListWorkerConfigurations", + "kendra:BatchGetDocumentStatus", + "kendra:DescribeDataSource", + "kendra:DescribeExperience", + "kendra:DescribeFaq", + "kendra:DescribeIndex", + "kendra:DescribePrincipalMapping", + "kendra:DescribeQuerySuggestionsBlockList", + "kendra:DescribeQuerySuggestionsConfig", + "kendra:DescribeThesaurus", + "kendra:GetQuerySuggestions", + "kendra:GetSnapshots", + "kendra:ListDataSources", + "kendra:ListDataSourceSyncJobs", + "kendra:ListEntityPersonas", + "kendra:ListExperienceEntities", + "kendra:ListExperiences", + "kendra:ListFaqs", + "kendra:ListGroupsOlderThanOrderingId", + "kendra:ListIndices", + "kendra:ListQuerySuggestionsBlockLists", + "kendra:ListTagsForResource", + "kendra:ListThesauri", + "kendra:Query", + "kinesis:Describe*", + "kinesis:Get*", + "kinesis:List*", + "kinesisanalytics:Describe*", + "kinesisanalytics:Discover*", + "kinesisanalytics:Get*", + "kinesisanalytics:List*", + "kinesisvideo:Describe*", + "kinesisvideo:Get*", + "kinesisvideo:List*", + "kms:Describe*", + "kms:Get*", + "kms:List*", + "lakeformation:DescribeResource", + "lakeformation:GetDataCellsFilter", + "lakeformation:GetDataLakeSettings", + "lakeformation:GetEffectivePermissionsForPath", + "lakeformation:GetLfTag", + "lakeformation:GetResourceLfTags", + "lakeformation:ListDataCellsFilter", + "lakeformation:ListLfTags", + "lakeformation:ListPermissions", + "lakeformation:ListResources", + "lakeformation:ListTableStorageOptimizers", + "lakeformation:SearchDatabasesByLfTags", + "lakeformation:SearchTablesByLfTags", + "lambda:Get*", + "lambda:List*", + "launchwizard:DescribeAdditionalNode", + "launchwizard:DescribeProvisionedApp", + "launchwizard:DescribeProvisioningEvents", + "launchwizard:DescribeSettingsSet", + "launchwizard:GetDeployment", + "launchwizard:GetInfrastructureSuggestion", + "launchwizard:GetIpAddress", + "launchwizard:GetResourceCostEstimate", + "launchwizard:GetResourceRecommendation", + "launchwizard:GetSettingsSet", + "launchwizard:GetWorkload", + "launchwizard:GetWorkloadAsset", + "launchwizard:GetWorkloadAssets", + "launchwizard:GetWorkloadDeploymentPattern", + "launchwizard:ListAdditionalNodes", + "launchwizard:ListAllowedResources", + "launchwizard:ListDeploymentEvents", + "launchwizard:ListDeployments", + "launchwizard:ListProvisionedApps", + "launchwizard:ListResourceCostEstimates", + "launchwizard:ListSettingsSets", + "launchwizard:ListTagsForResource", + "launchwizard:ListWorkloadDeploymentOptions", + "launchwizard:ListWorkloadDeploymentPatterns", + "launchwizard:ListWorkloads", + "lex:DescribeBot", + "lex:DescribeBotAlias", + "lex:DescribeBotChannel", + "lex:DescribeBotLocale", + "lex:DescribeBotReplica", + "lex:DescribeBotVersion", + "lex:DescribeExport", + "lex:DescribeImport", + "lex:DescribeIntent", + "lex:DescribeResourcePolicy", + "lex:DescribeSlot", + "lex:DescribeSlotType", + "lex:Get*", + "lex:ListBotAliases", + "lex:ListBotAliasReplicas", + "lex:ListBotChannels", + "lex:ListBotLocales", + "lex:ListBotReplicas", + "lex:ListBots", + "lex:ListBotVersionReplicas", + "lex:ListBotVersions", + "lex:ListBuiltInIntents", + "lex:ListBuiltInSlotTypes", + "lex:ListExports", + "lex:ListImports", + "lex:ListIntents", + "lex:ListSlots", + "lex:ListSlotTypes", + "lex:ListTagsForResource", + "license-manager:Get*", + "license-manager:List*", + "lightsail:GetActiveNames", + "lightsail:GetAlarms", + "lightsail:GetAutoSnapshots", + "lightsail:GetBlueprints", + "lightsail:GetBucketAccessKeys", + "lightsail:GetBucketBundles", + "lightsail:GetBucketMetricData", + "lightsail:GetBuckets", + "lightsail:GetBundles", + "lightsail:GetCertificates", + "lightsail:GetCloudFormationStackRecords", + "lightsail:GetContainerAPIMetadata", + "lightsail:GetContainerImages", + "lightsail:GetContainerServiceDeployments", + "lightsail:GetContainerServiceMetricData", + "lightsail:GetContainerServicePowers", + "lightsail:GetContainerServices", + "lightsail:GetDisk", + "lightsail:GetDisks", + "lightsail:GetDiskSnapshot", + "lightsail:GetDiskSnapshots", + "lightsail:GetDistributionBundles", + "lightsail:GetDistributionLatestCacheReset", + "lightsail:GetDistributionMetricData", + "lightsail:GetDistributions", + "lightsail:GetDomain", + "lightsail:GetDomains", + "lightsail:GetExportSnapshotRecords", + "lightsail:GetInstance", + "lightsail:GetInstanceMetricData", + "lightsail:GetInstancePortStates", + "lightsail:GetInstances", + "lightsail:GetInstanceSnapshot", + "lightsail:GetInstanceSnapshots", + "lightsail:GetInstanceState", + "lightsail:GetKeyPair", + "lightsail:GetKeyPairs", + "lightsail:GetLoadBalancer", + "lightsail:GetLoadBalancerMetricData", + "lightsail:GetLoadBalancers", + "lightsail:GetLoadBalancerTlsCertificates", + "lightsail:GetOperation", + "lightsail:GetOperations", + "lightsail:GetOperationsForResource", + "lightsail:GetRegions", + "lightsail:GetRelationalDatabase", + "lightsail:GetRelationalDatabaseBlueprints", + "lightsail:GetRelationalDatabaseBundles", + "lightsail:GetRelationalDatabaseEvents", + "lightsail:GetRelationalDatabaseLogEvents", + "lightsail:GetRelationalDatabaseLogStreams", + "lightsail:GetRelationalDatabaseMetricData", + "lightsail:GetRelationalDatabaseParameters", + "lightsail:GetRelationalDatabases", + "lightsail:GetRelationalDatabaseSnapshot", + "lightsail:GetRelationalDatabaseSnapshots", + "lightsail:GetStaticIp", + "lightsail:GetStaticIps", + "lightsail:Is*", + "logs:Describe*", + "logs:FilterLogEvents", + "logs:Get*", + "logs:ListAnomalies", + "logs:ListLogAnomalyDetectors", + "logs:ListLogDeliveries", + "logs:ListTagsForResource", + "logs:ListTagsLogGroup", + "logs:StartLiveTail", + "logs:StartQuery", + "logs:StopLiveTail", + "logs:StopQuery", + "logs:TestMetricFilter", + "lookoutequipment:DescribeDataIngestionJob", + "lookoutequipment:DescribeDataset", + "lookoutequipment:DescribeInferenceScheduler", + "lookoutequipment:DescribeLabel", + "lookoutequipment:DescribeLabelGroup", + "lookoutequipment:DescribeModel", + "lookoutequipment:DescribeModelVersion", + "lookoutequipment:DescribeResourcePolicy", + "lookoutequipment:DescribeRetrainingScheduler", + "lookoutequipment:ListDataIngestionJobs", + "lookoutequipment:ListDatasets", + "lookoutequipment:ListInferenceEvents", + "lookoutequipment:ListInferenceExecutions", + "lookoutequipment:ListInferenceSchedulers", + "lookoutequipment:ListLabelGroups", + "lookoutequipment:ListLabels", + "lookoutequipment:ListModels", + "lookoutequipment:ListModelVersions", + "lookoutequipment:ListRetrainingSchedulers", + "lookoutequipment:ListSensorStatistics", + "lookoutequipment:ListTagsForResource", + "lookoutmetrics:Describe*", + "lookoutmetrics:Get*", + "lookoutmetrics:List*", + "lookoutvision:DescribeDataset", + "lookoutvision:DescribeModel", + "lookoutvision:DescribeModelPackagingJob", + "lookoutvision:DescribeProject", + "lookoutvision:ListDatasetEntries", + "lookoutvision:ListModelPackagingJobs", + "lookoutvision:ListModels", + "lookoutvision:ListProjects", + "lookoutvision:ListTagsForResource", + "m2:GetApplication", + "m2:GetApplicationVersion", + "m2:GetBatchJobExecution", + "m2:GetDataSetDetails", + "m2:GetDataSetImportTask", + "m2:GetDeployment", + "m2:GetEnvironment", + "m2:ListApplications", + "m2:ListApplicationVersions", + "m2:ListBatchJobDefinitions", + "m2:ListBatchJobExecutions", + "m2:ListDataSetImportHistory", + "m2:ListDataSets", + "m2:ListDeployments", + "m2:ListEngineVersions", + "m2:ListEnvironments", + "m2:ListTagsForResource", + "machinelearning:Describe*", + "machinelearning:Get*", + "macie2:BatchGetCustomDataIdentifiers", + "macie2:DescribeBuckets", + "macie2:DescribeClassificationJob", + "macie2:DescribeOrganizationConfiguration", + "macie2:GetAdministratorAccount", + "macie2:GetAllowList", + "macie2:GetAutomatedDiscoveryConfiguration", + "macie2:GetBucketStatistics", + "macie2:GetClassificationExportConfiguration", + "macie2:GetClassificationScope", + "macie2:GetCustomDataIdentifier", + "macie2:GetFindings", + "macie2:GetFindingsFilter", + "macie2:GetFindingsPublicationConfiguration", + "macie2:GetFindingStatistics", + "macie2:GetInvitationsCount", + "macie2:GetMacieSession", + "macie2:GetMember", + "macie2:GetResourceProfile", + "macie2:GetRevealConfiguration", + "macie2:GetSensitiveDataOccurrencesAvailability", + "macie2:GetSensitivityInspectionTemplate", + "macie2:GetUsageStatistics", + "macie2:GetUsageTotals", + "macie2:ListAllowLists", + "macie2:ListAutomatedDiscoveryAccounts", + "macie2:ListClassificationJobs", + "macie2:ListClassificationScopes", + "macie2:ListCustomDataIdentifiers", + "macie2:ListFindings", + "macie2:ListFindingsFilters", + "macie2:ListInvitations", + "macie2:ListMembers", + "macie2:ListOrganizationAdminAccounts", + "macie2:ListResourceProfileArtifacts", + "macie2:ListResourceProfileDetections", + "macie2:ListSensitivityInspectionTemplates", + "macie2:ListTagsForResource", + "macie2:SearchResources", + "managedblockchain:GetMember", + "managedblockchain:GetNetwork", + "managedblockchain:GetNode", + "managedblockchain:GetProposal", + "managedblockchain:ListInvitations", + "managedblockchain:ListMembers", + "managedblockchain:ListNetworks", + "managedblockchain:ListNodes", + "managedblockchain:ListProposals", + "managedblockchain:ListProposalVotes", + "managedblockchain:ListTagsForResource", + "mediaconnect:DescribeFlow", + "mediaconnect:DescribeOffering", + "mediaconnect:DescribeReservation", + "mediaconnect:ListEntitlements", + "mediaconnect:ListFlows", + "mediaconnect:ListOfferings", + "mediaconnect:ListReservations", + "mediaconnect:ListTagsForResource", + "mediaconvert:DescribeEndpoints", + "mediaconvert:Get*", + "mediaconvert:List*", + "medialive:DescribeChannel", + "medialive:DescribeInput", + "medialive:DescribeInputDevice", + "medialive:DescribeInputDeviceThumbnail", + "medialive:DescribeInputSecurityGroup", + "medialive:DescribeMultiplex", + "medialive:DescribeMultiplexProgram", + "medialive:DescribeOffering", + "medialive:DescribeReservation", + "medialive:DescribeSchedule", + "medialive:GetCloudWatchAlarmTemplate", + "medialive:GetCloudWatchAlarmTemplateGroup", + "medialive:GetEventBridgeRuleTemplate", + "medialive:GetEventBridgeRuleTemplateGroup", + "medialive:GetSignalMap", + "medialive:ListChannels", + "medialive:ListCloudWatchAlarmTemplateGroups", + "medialive:ListCloudWatchAlarmTemplates", + "medialive:ListEventBridgeRuleTemplateGroups", + "medialive:ListEventBridgeRuleTemplates", + "medialive:ListInputDevices", + "medialive:ListInputDeviceTransfers", + "medialive:ListInputs", + "medialive:ListInputSecurityGroups", + "medialive:ListMultiplexes", + "medialive:ListMultiplexPrograms", + "medialive:ListOfferings", + "medialive:ListReservations", + "medialive:ListSignalMaps", + "medialive:ListTagsForResource", + "mediapackage-vod:Describe*", + "mediapackage-vod:List*", + "mediapackage:Describe*", + "mediapackage:List*", + "mediapackagev2:GetChannel", + "mediapackagev2:GetChannelGroup", + "mediapackagev2:GetChannelPolicy", + "mediapackagev2:GetHeadObject", + "mediapackagev2:GetObject", + "mediapackagev2:GetOriginEndpoint", + "mediapackagev2:GetOriginEndpointPolicy", + "mediapackagev2:ListChannelGroups", + "mediapackagev2:ListChannels", + "mediapackagev2:ListOriginEndpoints", + "mediapackagev2:ListTagsForResource", + "mediastore:DescribeContainer", + "mediastore:DescribeObject", + "mediastore:GetContainerPolicy", + "mediastore:GetCorsPolicy", + "mediastore:GetLifecyclePolicy", + "mediastore:GetMetricPolicy", + "mediastore:GetObject", + "mediastore:ListContainers", + "mediastore:ListItems", + "mediastore:ListTagsForResource", + "memorydb:DescribeClusters", + "memorydb:DescribeParameterGroups", + "memorydb:DescribeParameters", + "memorydb:ListTags", + "mgh:Describe*", + "mgh:GetHomeRegion", + "mgh:List*", + "mgn:DescribeJobLogItems", + "mgn:DescribeJobs", + "mgn:DescribeLaunchConfigurationTemplates", + "mgn:DescribeReplicationConfigurationTemplates", + "mgn:DescribeSourceServers", + "mgn:DescribeVcenterClients", + "mgn:GetLaunchConfiguration", + "mgn:GetReplicationConfiguration", + "mgn:ListApplications", + "mgn:ListSourceServerActions", + "mgn:ListTemplateActions", + "mgn:ListWaves", + "mobileanalytics:Get*", + "mobiletargeting:Get*", + "mobiletargeting:List*", + "monitron:GetProject", + "monitron:GetProjectAdminUser", + "monitron:ListProjects", + "monitron:ListTagsForResource", + "mq:Describe*", + "mq:List*", + "network-firewall:DescribeFirewall", + "network-firewall:DescribeFirewallPolicy", + "network-firewall:DescribeLoggingConfiguration", + "network-firewall:DescribeResourcePolicy", + "network-firewall:DescribeRuleGroup", + "network-firewall:DescribeRuleGroupMetadata", + "network-firewall:DescribeTLSInspectionConfiguration", + "network-firewall:ListFirewallPolicies", + "network-firewall:ListFirewalls", + "network-firewall:ListRuleGroups", + "network-firewall:ListTagsForResource", + "network-firewall:ListTLSInspectionConfigurations", + "networkmanager:DescribeGlobalNetworks", + "networkmanager:GetConnectAttachment", + "networkmanager:GetConnections", + "networkmanager:GetConnectPeer", + "networkmanager:GetConnectPeerAssociations", + "networkmanager:GetCoreNetwork", + "networkmanager:GetCoreNetworkChangeEvents", + "networkmanager:GetCoreNetworkChangeSet", + "networkmanager:GetCoreNetworkPolicy", + "networkmanager:GetCustomerGatewayAssociations", + "networkmanager:GetDevices", + "networkmanager:GetLinkAssociations", + "networkmanager:GetLinks", + "networkmanager:GetNetworkResourceCounts", + "networkmanager:GetNetworkResourceRelationships", + "networkmanager:GetNetworkResources", + "networkmanager:GetNetworkRoutes", + "networkmanager:GetNetworkTelemetry", + "networkmanager:GetResourcePolicy", + "networkmanager:GetRouteAnalysis", + "networkmanager:GetSites", + "networkmanager:GetSiteToSiteVpnAttachment", + "networkmanager:GetTransitGatewayConnectPeerAssociations", + "networkmanager:GetTransitGatewayPeering", + "networkmanager:GetTransitGatewayRegistrations", + "networkmanager:GetTransitGatewayRouteTableAttachment", + "networkmanager:GetVpcAttachment", + "networkmanager:ListAttachments", + "networkmanager:ListConnectPeers", + "networkmanager:ListCoreNetworkPolicyVersions", + "networkmanager:ListCoreNetworks", + "networkmanager:ListPeerings", + "networkmanager:ListTagsForResource", + "nimble:GetEula", + "nimble:GetFeatureMap", + "nimble:GetLaunchProfile", + "nimble:GetLaunchProfileDetails", + "nimble:GetLaunchProfileInitialization", + "nimble:GetLaunchProfileMember", + "nimble:GetStreamingImage", + "nimble:GetStreamingSession", + "nimble:GetStudio", + "nimble:GetStudioComponent", + "nimble:GetStudioMember", + "nimble:ListEulaAcceptances", + "nimble:ListEulas", + "nimble:ListLaunchProfileMembers", + "nimble:ListLaunchProfiles", + "nimble:ListStreamingImages", + "nimble:ListStreamingSessions", + "nimble:ListStudioComponents", + "nimble:ListStudioMembers", + "nimble:ListStudios", + "nimble:ListTagsForResource", + "notifications-contacts:GetEmailContact", + "notifications-contacts:ListEmailContacts", + "notifications-contacts:ListTagsForResource", + "notifications:GetEventRule", + "notifications:GetNotificationConfiguration", + "notifications:GetNotificationEvent", + "notifications:ListChannels", + "notifications:ListEventRules", + "notifications:ListNotificationConfigurations", + "notifications:ListNotificationEvents", + "notifications:ListNotificationHubs", + "notifications:ListTagsForResource", + "oam:GetLink", + "oam:GetSink", + "oam:GetSinkPolicy", + "oam:ListAttachedLinks", + "oam:ListLinks", + "oam:ListSinks", + "omics:Get*", + "omics:List*", + "one:GetDeviceConfigurationTemplate", + "one:GetDeviceInstance", + "one:GetDeviceInstanceConfiguration", + "one:GetSite", + "one:GetSiteAddress", + "one:ListDeviceConfigurationTemplates", + "one:ListDeviceInstances", + "one:ListSites", + "one:ListUsers", + "opsworks-cm:Describe*", + "opsworks-cm:List*", + "opsworks:Describe*", + "opsworks:Get*", + "organizations:Describe*", + "organizations:List*", + "osis:GetPipeline", + "osis:GetPipelineBlueprint", + "osis:GetPipelineChangeProgress", + "osis:ListPipelineBlueprints", + "osis:ListPipelines", + "osis:ListTagsForResource", + "outposts:Get*", + "outposts:List*", + "payment-cryptography:GetAlias", + "payment-cryptography:GetKey", + "payment-cryptography:GetPublicKeyCertificate", + "payment-cryptography:ListAliases", + "payment-cryptography:ListKeys", + "payment-cryptography:ListTagsForResource", + "payments:GetPaymentInstrument", + "payments:GetPaymentStatus", + "payments:ListPaymentInstruments", + "payments:ListPaymentPreferences", + "payments:ListTagsForResource", + "pca-connector-ad:GetConnector", + "pca-connector-ad:GetDirectoryRegistration", + "pca-connector-ad:GetServicePrincipalName", + "pca-connector-ad:GetTemplate", + "pca-connector-ad:GetTemplateGroupAccessControlEntry", + "pca-connector-ad:ListConnectors", + "pca-connector-ad:ListDirectoryRegistrations", + "pca-connector-ad:ListServicePrincipalNames", + "pca-connector-ad:ListTagsForResource", + "pca-connector-ad:ListTemplateGroupAccessControlEntries", + "pca-connector-ad:ListTemplates", + "pca-connector-scep:GetChallengeMetadata", + "pca-connector-scep:GetConnector", + "pca-connector-scep:ListChallengeMetadata", + "pca-connector-scep:ListConnectors", + "pca-connector-scep:ListTagsForResource", + "personalize:Describe*", + "personalize:Get*", + "personalize:List*", + "pi:DescribeDimensionKeys", + "pi:GetDimensionKeyDetails", + "pi:GetResourceMetadata", + "pi:GetResourceMetrics", + "pi:ListAvailableResourceDimensions", + "pi:ListAvailableResourceMetrics", + "pipes:DescribePipe", + "pipes:ListPipes", + "pipes:ListTagsForResource", + "polly:Describe*", + "polly:Get*", + "polly:List*", + "polly:SynthesizeSpeech", + "pricing:DescribeServices", + "pricing:GetAttributeValues", + "pricing:GetPriceListFileUrl", + "pricing:GetProducts", + "pricing:ListPriceLists", + "proton:GetDeployment", + "proton:GetEnvironment", + "proton:GetEnvironmentTemplate", + "proton:GetEnvironmentTemplateVersion", + "proton:GetService", + "proton:GetServiceInstance", + "proton:GetServiceTemplate", + "proton:GetServiceTemplateVersion", + "proton:ListDeployments", + "proton:ListEnvironmentAccountConnections", + "proton:ListEnvironments", + "proton:ListEnvironmentTemplates", + "proton:ListServiceInstances", + "proton:ListServices", + "proton:ListServiceTemplates", + "proton:ListTagsForResource", + "purchase-orders:GetPurchaseOrder", + "purchase-orders:ListPurchaseOrderInvoices", + "purchase-orders:ListPurchaseOrders", + "purchase-orders:ViewPurchaseOrders", + "qbusiness:GetApplication", + "qbusiness:GetChatControlsConfiguration", + "qbusiness:GetDataSource", + "qbusiness:GetGroup", + "qbusiness:GetIndex", + "qbusiness:GetPlugin", + "qbusiness:GetRetriever", + "qbusiness:GetUser", + "qbusiness:GetWebExperience", + "qbusiness:ListApplications", + "qbusiness:ListDataSources", + "qbusiness:ListDataSourceSyncJobs", + "qbusiness:ListGroups", + "qbusiness:ListIndices", + "qbusiness:ListPlugins", + "qbusiness:ListRetrievers", + "qbusiness:ListSubscriptions", + "qbusiness:ListTagsForResource", + "qbusiness:ListWebExperiences", + "qldb:DescribeJournalKinesisStream", + "qldb:DescribeJournalS3Export", + "qldb:DescribeLedger", + "qldb:GetBlock", + "qldb:GetDigest", + "qldb:GetRevision", + "qldb:ListJournalKinesisStreamsForLedger", + "qldb:ListJournalS3Exports", + "qldb:ListJournalS3ExportsForLedger", + "qldb:ListLedgers", + "qldb:ListTagsForResource", + "ram:Get*", + "ram:List*", + "rbin:GetRule", + "rbin:ListRules", + "rbin:ListTagsForResource", + "rds:Describe*", + "rds:Download*", + "rds:List*", + "redshift-serverless:GetCustomDomainAssociation", + "redshift-serverless:GetEndpointAccess", + "redshift-serverless:GetNamespace", + "redshift-serverless:GetRecoveryPoint", + "redshift-serverless:GetResourcePolicy", + "redshift-serverless:GetScheduledAction", + "redshift-serverless:GetSnapshot", + "redshift-serverless:GetTableRestoreStatus", + "redshift-serverless:GetUsageLimit", + "redshift-serverless:GetWorkgroup", + "redshift-serverless:ListCustomDomainAssociations", + "redshift-serverless:ListEndpointAccess", + "redshift-serverless:ListNamespaces", + "redshift-serverless:ListRecoveryPoints", + "redshift-serverless:ListScheduledActions", + "redshift-serverless:ListSnapshotCopyConfigurations", + "redshift-serverless:ListSnapshots", + "redshift-serverless:ListTableRestoreStatus", + "redshift-serverless:ListTagsForResource", + "redshift-serverless:ListUsageLimits", + "redshift-serverless:ListWorkgroups", + "redshift:Describe*", + "redshift:GetReservedNodeExchangeOfferings", + "redshift:ListRecommendations", + "redshift:View*", + "refactor-spaces:GetApplication", + "refactor-spaces:GetEnvironment", + "refactor-spaces:GetResourcePolicy", + "refactor-spaces:GetRoute", + "refactor-spaces:GetService", + "refactor-spaces:ListApplications", + "refactor-spaces:ListEnvironments", + "refactor-spaces:ListEnvironmentVpcs", + "refactor-spaces:ListRoutes", + "refactor-spaces:ListServices", + "refactor-spaces:ListTagsForResource", + "rekognition:CompareFaces", + "rekognition:DescribeDataset", + "rekognition:DescribeProjects", + "rekognition:DescribeProjectVersions", + "rekognition:DescribeStreamProcessor", + "rekognition:Detect*", + "rekognition:GetCelebrityInfo", + "rekognition:GetCelebrityRecognition", + "rekognition:GetContentModeration", + "rekognition:GetFaceDetection", + "rekognition:GetFaceSearch", + "rekognition:GetLabelDetection", + "rekognition:GetPersonTracking", + "rekognition:GetSegmentDetection", + "rekognition:GetTextDetection", + "rekognition:List*", + "rekognition:RecognizeCelebrities", + "rekognition:Search*", + "resiliencehub:DescribeApp", + "resiliencehub:DescribeAppAssessment", + "resiliencehub:DescribeAppVersion", + "resiliencehub:DescribeAppVersionAppComponent", + "resiliencehub:DescribeAppVersionResource", + "resiliencehub:DescribeAppVersionResourcesResolutionStatus", + "resiliencehub:DescribeAppVersionTemplate", + "resiliencehub:DescribeDraftAppVersionResourcesImportStatus", + "resiliencehub:DescribeResiliencyPolicy", + "resiliencehub:DescribeResourceGroupingRecommendationTask", + "resiliencehub:ListAlarmRecommendations", + "resiliencehub:ListAppAssessmentComplianceDrifts", + "resiliencehub:ListAppAssessmentResourceDrifts", + "resiliencehub:ListAppAssessments", + "resiliencehub:ListAppComponentCompliances", + "resiliencehub:ListAppComponentRecommendations", + "resiliencehub:ListAppInputSources", + "resiliencehub:ListApps", + "resiliencehub:ListAppVersionAppComponents", + "resiliencehub:ListAppVersionResourceMappings", + "resiliencehub:ListAppVersionResources", + "resiliencehub:ListAppVersions", + "resiliencehub:ListRecommendationTemplates", + "resiliencehub:ListResiliencyPolicies", + "resiliencehub:ListResourceGroupingRecommendations", + "resiliencehub:ListSopRecommendations", + "resiliencehub:ListSuggestedResiliencyPolicies", + "resiliencehub:ListTagsForResource", + "resiliencehub:ListTestRecommendations", + "resiliencehub:ListUnsupportedAppVersionResources", + "resource-explorer-2:BatchGetView", + "resource-explorer-2:GetDefaultView", + "resource-explorer-2:GetIndex", + "resource-explorer-2:GetView", + "resource-explorer-2:ListIndexes", + "resource-explorer-2:ListSupportedResourceTypes", + "resource-explorer-2:ListTagsForResource", + "resource-explorer-2:ListViews", + "resource-explorer-2:Search", + "resource-groups:Get*", + "resource-groups:List*", + "resource-groups:Search*", + "robomaker:BatchDescribe*", + "robomaker:Describe*", + "robomaker:Get*", + "robomaker:List*", + "route53-recovery-cluster:Get*", + "route53-recovery-cluster:ListRoutingControls", + "route53-recovery-control-config:Describe*", + "route53-recovery-control-config:GetResourcePolicy", + "route53-recovery-control-config:List*", + "route53-recovery-readiness:Get*", + "route53-recovery-readiness:List*", + "route53:Get*", + "route53:List*", + "route53:Test*", + "route53domains:Check*", + "route53domains:Get*", + "route53domains:List*", + "route53domains:View*", + "route53profiles:GetProfile", + "route53profiles:GetProfileAssociation", + "route53profiles:GetProfileResourceAssociation", + "route53profiles:ListProfileAssociations", + "route53profiles:ListProfileResourceAssociations", + "route53profiles:ListProfiles", + "route53profiles:ListTagsForResource", + "route53resolver:Get*", + "route53resolver:List*", + "rum:GetAppMonitor", + "rum:GetAppMonitorData", + "rum:ListAppMonitors", + "s3-object-lambda:GetObject", + "s3-object-lambda:GetObjectAcl", + "s3-object-lambda:GetObjectLegalHold", + "s3-object-lambda:GetObjectRetention", + "s3-object-lambda:GetObjectTagging", + "s3-object-lambda:GetObjectVersion", + "s3-object-lambda:GetObjectVersionAcl", + "s3-object-lambda:GetObjectVersionTagging", + "s3-object-lambda:ListBucket", + "s3-object-lambda:ListBucketMultipartUploads", + "s3-object-lambda:ListBucketVersions", + "s3-object-lambda:ListMultipartUploadParts", + "s3-outposts:GetAccessPoint", + "s3-outposts:GetAccessPointPolicy", + "s3-outposts:GetBucket", + "s3-outposts:GetBucketPolicy", + "s3-outposts:GetBucketTagging", + "s3-outposts:GetBucketVersioning", + "s3-outposts:GetLifecycleConfiguration", + "s3-outposts:GetObject", + "s3-outposts:GetObjectTagging", + "s3-outposts:GetObjectVersion", + "s3-outposts:GetObjectVersionForReplication", + "s3-outposts:GetObjectVersionTagging", + "s3-outposts:GetReplicationConfiguration", + "s3-outposts:ListAccessPoints", + "s3-outposts:ListBucket", + "s3-outposts:ListBucketMultipartUploads", + "s3-outposts:ListBucketVersions", + "s3-outposts:ListEndpoints", + "s3-outposts:ListMultipartUploadParts", + "s3-outposts:ListOutpostsWithS3", + "s3-outposts:ListRegionalBuckets", + "s3-outposts:ListSharedEndpoints", + "s3:DescribeJob", + "s3:Get*", + "s3:List*", + "sagemaker-groundtruth-synthetic:GetAccountDetails", + "sagemaker-groundtruth-synthetic:GetBatch", + "sagemaker-groundtruth-synthetic:GetProject", + "sagemaker-groundtruth-synthetic:ListBatchDataTransfers", + "sagemaker-groundtruth-synthetic:ListBatchSummaries", + "sagemaker-groundtruth-synthetic:ListProjectDataTransfers", + "sagemaker-groundtruth-synthetic:ListProjectSummaries", + "sagemaker:Describe*", + "sagemaker:GetSearchSuggestions", + "sagemaker:List*", + "sagemaker:Search", + "savingsplans:DescribeSavingsPlanRates", + "savingsplans:DescribeSavingsPlans", + "savingsplans:DescribeSavingsPlansOfferingRates", + "savingsplans:DescribeSavingsPlansOfferings", + "savingsplans:ListTagsForResource", + "scheduler:GetSchedule", + "scheduler:GetScheduleGroup", + "scheduler:ListScheduleGroups", + "scheduler:ListSchedules", + "scheduler:ListTagsForResource", + "schemas:Describe*", + "schemas:Get*", + "schemas:List*", + "schemas:Search*", + "sdb:Get*", + "sdb:List*", + "sdb:Select*", + "secretsmanager:Describe*", + "secretsmanager:GetResourcePolicy", + "secretsmanager:List*", + "securityhub:BatchGetAutomationRules", + "securityhub:BatchGetConfigurationPolicyAssociations", + "securityhub:BatchGetControlEvaluations", + "securityhub:BatchGetSecurityControls", + "securityhub:BatchGetStandardsControlAssociations", + "securityhub:Describe*", + "securityhub:Get*", + "securityhub:List*", + "securitylake:GetDataLakeExceptionSubscription", + "securitylake:GetDataLakeOrganizationConfiguration", + "securitylake:GetDataLakeSources", + "securitylake:GetSubscriber", + "securitylake:ListDataLakeExceptions", + "securitylake:ListDataLakes", + "securitylake:ListLogSources", + "securitylake:ListSubscribers", + "securitylake:ListTagsForResource", + "serverlessrepo:Get*", + "serverlessrepo:List*", + "serverlessrepo:SearchApplications", + "servicecatalog:Describe*", + "servicecatalog:GetApplication", + "servicecatalog:GetAttributeGroup", + "servicecatalog:List*", + "servicecatalog:Scan*", + "servicecatalog:Search*", + "servicediscovery:DiscoverInstances", + "servicediscovery:DiscoverInstancesRevision", + "servicediscovery:Get*", + "servicediscovery:List*", + "servicequotas:GetAssociationForServiceQuotaTemplate", + "servicequotas:GetAWSDefaultServiceQuota", + "servicequotas:GetRequestedServiceQuotaChange", + "servicequotas:GetServiceQuota", + "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", + "servicequotas:ListAWSDefaultServiceQuotas", + "servicequotas:ListRequestedServiceQuotaChangeHistory", + "servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota", + "servicequotas:ListServiceQuotaIncreaseRequestsInTemplate", + "servicequotas:ListServiceQuotas", + "servicequotas:ListServices", + "ses:BatchGetMetricData", + "ses:Describe*", + "ses:Get*", + "ses:List*", + "shield:Describe*", + "shield:Get*", + "shield:List*", + "signer:DescribeSigningJob", + "signer:GetSigningPlatform", + "signer:GetSigningProfile", + "signer:ListProfilePermissions", + "signer:ListSigningJobs", + "signer:ListSigningPlatforms", + "signer:ListSigningProfiles", + "signer:ListTagsForResource", + "signin:ListTrustedIdentityPropagationApplicationsForConsole", + "sms-voice:DescribeAccountAttributes", + "sms-voice:DescribeAccountLimits", + "sms-voice:DescribeConfigurationSets", + "sms-voice:DescribeKeywords", + "sms-voice:DescribeOptedOutNumbers", + "sms-voice:DescribeOptOutLists", + "sms-voice:DescribePhoneNumbers", + "sms-voice:DescribePools", + "sms-voice:DescribeSenderIds", + "sms-voice:DescribeSpendLimits", + "sms-voice:ListPoolOriginationIdentities", + "sms-voice:ListTagsForResource", + "snowball:Describe*", + "snowball:Get*", + "snowball:List*", + "sns:Check*", + "sns:Get*", + "sns:List*", + "sqs:Get*", + "sqs:List*", + "sqs:Receive*", + "ssm-contacts:DescribeEngagement", + "ssm-contacts:DescribePage", + "ssm-contacts:GetContact", + "ssm-contacts:GetContactChannel", + "ssm-contacts:ListContactChannels", + "ssm-contacts:ListContacts", + "ssm-contacts:ListEngagements", + "ssm-contacts:ListPageReceipts", + "ssm-contacts:ListPagesByContact", + "ssm-contacts:ListPagesByEngagement", + "ssm-incidents:GetIncidentRecord", + "ssm-incidents:GetReplicationSet", + "ssm-incidents:GetResourcePolicies", + "ssm-incidents:GetResponsePlan", + "ssm-incidents:GetTimelineEvent", + "ssm-incidents:ListIncidentRecords", + "ssm-incidents:ListRelatedItems", + "ssm-incidents:ListReplicationSets", + "ssm-incidents:ListResponsePlans", + "ssm-incidents:ListTagsForResource", + "ssm-incidents:ListTimelineEvents", + "ssm-sap:GetApplication", + "ssm-sap:GetComponent", + "ssm-sap:GetDatabase", + "ssm-sap:GetOperation", + "ssm-sap:GetResourcePermission", + "ssm-sap:ListApplications", + "ssm-sap:ListComponents", + "ssm-sap:ListDatabases", + "ssm-sap:ListOperationEvents", + "ssm-sap:ListOperations", + "ssm-sap:ListTagsForResource", + "ssm:Describe*", + "ssm:Get*", + "ssm:List*", + "sso-directory:Describe*", + "sso-directory:List*", + "sso-directory:Search*", + "sso:Describe*", + "sso:Get*", + "sso:List*", + "sso:Search*", + "states:Describe*", + "states:GetExecutionHistory", + "states:List*", + "states:ValidateStateMachineDefinition", + "storagegateway:Describe*", + "storagegateway:List*", + "sts:GetAccessKeyInfo", + "sts:GetCallerIdentity", + "sts:GetSessionToken", + "support:DescribeAttachment", + "support:DescribeCases", + "support:DescribeCommunications", + "support:DescribeServices", + "support:DescribeSeverityLevels", + "support:DescribeTrustedAdvisorCheckRefreshStatuses", + "support:DescribeTrustedAdvisorCheckResult", + "support:DescribeTrustedAdvisorChecks", + "support:DescribeTrustedAdvisorCheckSummaries", + "supportplans:GetSupportPlan", + "supportplans:GetSupportPlanUpdateStatus", + "sustainability:GetCarbonFootprintSummary", + "swf:Count*", + "swf:Describe*", + "swf:Get*", + "swf:List*", + "synthetics:Describe*", + "synthetics:Get*", + "synthetics:List*", + "tag:DescribeReportCreation", + "tag:Get*", + "tax:GetExemptions", + "tax:GetTaxInheritance", + "tax:GetTaxInterview", + "tax:GetTaxRegistration", + "tax:GetTaxRegistrationDocument", + "tax:ListTaxRegistrations", + "timestream:DescribeBatchLoadTask", + "timestream:DescribeDatabase", + "timestream:DescribeEndpoints", + "timestream:DescribeTable", + "timestream:ListBatchLoadTasks", + "timestream:ListDatabases", + "timestream:ListMeasures", + "timestream:ListTables", + "timestream:ListTagsForResource", + "tnb:GetSolFunctionInstance", + "tnb:GetSolFunctionPackage", + "tnb:GetSolFunctionPackageContent", + "tnb:GetSolFunctionPackageDescriptor", + "tnb:GetSolNetworkInstance", + "tnb:GetSolNetworkOperation", + "tnb:GetSolNetworkPackage", + "tnb:GetSolNetworkPackageContent", + "tnb:GetSolNetworkPackageDescriptor", + "tnb:ListSolFunctionInstances", + "tnb:ListSolFunctionPackages", + "tnb:ListSolNetworkInstances", + "tnb:ListSolNetworkOperations", + "tnb:ListSolNetworkPackages", + "tnb:ListTagsForResource", + "transcribe:Get*", + "transcribe:List*", + "transfer:Describe*", + "transfer:List*", + "transfer:TestIdentityProvider", + "translate:DescribeTextTranslationJob", + "translate:GetParallelData", + "translate:GetTerminology", + "translate:ListParallelData", + "translate:ListTerminologies", + "translate:ListTextTranslationJobs", + "trustedadvisor:Describe*", + "trustedadvisor:GetOrganizationRecommendation", + "trustedadvisor:GetRecommendation", + "trustedadvisor:ListChecks", + "trustedadvisor:ListOrganizationRecommendationAccounts", + "trustedadvisor:ListOrganizationRecommendationResources", + "trustedadvisor:ListOrganizationRecommendations", + "trustedadvisor:ListRecommendationResources", + "trustedadvisor:ListRecommendations", + "user-subscriptions:ListApplicationClaims", + "user-subscriptions:ListClaims", + "user-subscriptions:ListUserSubscriptions", + "verifiedpermissions:GetIdentitySource", + "verifiedpermissions:GetPolicy", + "verifiedpermissions:GetPolicyStore", + "verifiedpermissions:GetPolicyTemplate", + "verifiedpermissions:GetSchema", + "verifiedpermissions:IsAuthorized", + "verifiedpermissions:IsAuthorizedWithToken", + "verifiedpermissions:ListIdentitySources", + "verifiedpermissions:ListPolicies", + "verifiedpermissions:ListPolicyStores", + "verifiedpermissions:ListPolicyTemplates", + "vpc-lattice:GetAccessLogSubscription", + "vpc-lattice:GetAuthPolicy", + "vpc-lattice:GetListener", + "vpc-lattice:GetResourcePolicy", + "vpc-lattice:GetRule", + "vpc-lattice:GetService", + "vpc-lattice:GetServiceNetwork", + "vpc-lattice:GetServiceNetworkServiceAssociation", + "vpc-lattice:GetServiceNetworkVpcAssociation", + "vpc-lattice:GetTargetGroup", + "vpc-lattice:ListAccessLogSubscriptions", + "vpc-lattice:ListListeners", + "vpc-lattice:ListRules", + "vpc-lattice:ListServiceNetworks", + "vpc-lattice:ListServiceNetworkServiceAssociations", + "vpc-lattice:ListServiceNetworkVpcAssociations", + "vpc-lattice:ListServices", + "vpc-lattice:ListTagsForResource", + "vpc-lattice:ListTargetGroups", + "vpc-lattice:ListTargets", + "waf-regional:Get*", + "waf-regional:List*", + "waf:Get*", + "waf:List*", + "wafv2:CheckCapacity", + "wafv2:Describe*", + "wafv2:Get*", + "wafv2:List*", + "wellarchitected:ExportLens", + "wellarchitected:GetAnswer", + "wellarchitected:GetConsolidatedReport", + "wellarchitected:GetLens", + "wellarchitected:GetLensReview", + "wellarchitected:GetLensReviewReport", + "wellarchitected:GetLensVersionDifference", + "wellarchitected:GetMilestone", + "wellarchitected:GetProfile", + "wellarchitected:GetProfileTemplate", + "wellarchitected:GetReviewTemplate", + "wellarchitected:GetReviewTemplateAnswer", + "wellarchitected:GetReviewTemplateLensReview", + "wellarchitected:GetWorkload", + "wellarchitected:ListAnswers", + "wellarchitected:ListCheckDetails", + "wellarchitected:ListCheckSummaries", + "wellarchitected:ListLenses", + "wellarchitected:ListLensReviewImprovements", + "wellarchitected:ListLensReviews", + "wellarchitected:ListLensShares", + "wellarchitected:ListMilestones", + "wellarchitected:ListNotifications", + "wellarchitected:ListProfileNotifications", + "wellarchitected:ListProfiles", + "wellarchitected:ListProfileShares", + "wellarchitected:ListReviewTemplateAnswers", + "wellarchitected:ListReviewTemplates", + "wellarchitected:ListShareInvitations", + "wellarchitected:ListTagsForResource", + "wellarchitected:ListTemplateShares", + "wellarchitected:ListWorkloads", + "wellarchitected:ListWorkloadShares", + "workdocs:CheckAlias", + "workdocs:Describe*", + "workdocs:Get*", + "workmail:Describe*", + "workmail:Get*", + "workmail:List*", + "workmail:Search*", + "workspaces-web:GetBrowserSettings", + "workspaces-web:GetIdentityProvider", + "workspaces-web:GetNetworkSettings", + "workspaces-web:GetPortal", + "workspaces-web:GetPortalServiceProviderMetadata", + "workspaces-web:GetTrustStore", + "workspaces-web:GetUserAccessLoggingSettings", + "workspaces-web:GetUserSettings", + "workspaces-web:ListBrowserSettings", + "workspaces-web:ListIdentityProviders", + "workspaces-web:ListNetworkSettings", + "workspaces-web:ListPortals", + "workspaces-web:ListTagsForResource", + "workspaces-web:ListTrustStores", + "workspaces-web:ListUserAccessLoggingSettings", + "workspaces-web:ListUserSettings", + "workspaces:Describe*", + "xray:BatchGet*", + "xray:Get*" + ], + "Resource": "*" + } + ] + } } }, "createdDate": "2015-02-06T18:39:48.000Z", - "lastUpdatedDate": "2024-09-16T18:53:21.000Z" + "lastUpdatedDate": "2024-10-15T19:03:24.000Z" }, "AWSCloudFormationReadOnlyAccess": { "arn": "arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess", @@ -138787,8 +141145,8 @@ }, "ViewOnlyAccess": { "arn": "arn:aws:iam::aws:policy/job-function/ViewOnlyAccess", - "latestVersionId": "v19", - "versionsCount": 19, + "latestVersionId": "v20", + "versionsCount": 20, "versions": { "v2": { "createdDate": "2016-12-09T22:20:46.000Z", @@ -139680,7 +142038,200 @@ "cloudtrail:DescribeTrails", "cloudtrail:LookupEvents", "cloudwatch:List*", - "cloudwatch:GetMetricData", + "cloudwatch:GetMetricData", + "codebuild:ListBuilds*", + "codebuild:ListProjects", + "codecommit:List*", + "codedeploy:List*", + "codedeploy:Get*", + "codepipeline:ListPipelines", + "codestar:List*", + "codestar:Verify*", + "cognito-idp:List*", + "cognito-identity:ListIdentities", + "cognito-identity:ListIdentityPools", + "cognito-sync:ListDatasets", + "connect:List*", + "config:List*", + "config:Describe*", + "datapipeline:ListPipelines", + "datapipeline:DescribePipelines", + "datapipeline:GetAccountLimits", + "devicefarm:List*", + "directconnect:Describe*", + "discovery:List*", + "dms:List*", + "ds:DescribeDirectories", + "dynamodb:ListTables", + "ec2:DescribeAccountAttributes", + "ec2:DescribeAddresses", + "ec2:DescribeAvailabilityZones", + "ec2:DescribeBundleTasks", + "ec2:DescribeClassicLinkInstances", + "ec2:DescribeConversionTasks", + "ec2:DescribeCustomerGateways", + "ec2:DescribeDhcpOptions", + "ec2:DescribeExportTasks", + "ec2:DescribeFlowLogs", + "ec2:DescribeHost*", + "ec2:DescribeIdentityIdFormat", + "ec2:DescribeIdFormat", + "ec2:DescribeImage*", + "ec2:DescribeImport*", + "ec2:DescribeInstance*", + "ec2:DescribeInternetGateways", + "ec2:DescribeKeyPairs", + "ec2:DescribeMovingAddresses", + "ec2:DescribeNatGateways", + "ec2:DescribeNetwork*", + "ec2:DescribePlacementGroups", + "ec2:DescribePrefixLists", + "ec2:DescribeRegions", + "ec2:DescribeReserved*", + "ec2:DescribeRouteTables", + "ec2:DescribeSecurityGroups", + "ec2:DescribeSnapshot*", + "ec2:DescribeSpot*", + "ec2:DescribeSubnets", + "ec2:DescribeVolume*", + "ec2:DescribeVpc*", + "ec2:DescribeVpnGateways", + "ecr:DescribeRepositories", + "ecr:ListImages", + "ecs:List*", + "ecs:Describe*", + "elasticache:Describe*", + "elasticbeanstalk:DescribeApplicationVersions", + "elasticbeanstalk:DescribeApplications", + "elasticbeanstalk:DescribeEnvironments", + "elasticbeanstalk:ListAvailableSolutionStacks", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeTargetGroups", + "elasticloadbalancing:DescribeTargetHealth", + "elasticfilesystem:DescribeFileSystems", + "elasticmapreduce:List*", + "elastictranscoder:List*", + "es:DescribeElasticsearchDomain", + "es:DescribeElasticsearchDomains", + "es:ListDomainNames", + "events:ListRuleNamesByTarget", + "events:ListRules", + "events:ListTargetsByRule", + "firehose:List*", + "firehose:DescribeDeliveryStream", + "gamelift:List*", + "glacier:List*", + "iam:List*", + "iam:GetAccountSummary", + "iam:GetLoginProfile", + "importexport:ListJobs", + "inspector:List*", + "iot:List*", + "kinesis:ListStreams", + "kinesisanalytics:ListApplications", + "kms:ListKeys", + "lambda:List*", + "lex:GetBotAliases", + "lex:GetBotChannelAssociations", + "lex:GetBots", + "lex:GetBotVersions", + "lex:GetIntents", + "lex:GetIntentVersions", + "lex:GetSlotTypes", + "lex:GetSlotTypeVersions", + "lex:GetUtterancesView", + "lightsail:GetBlueprints", + "lightsail:GetBundles", + "lightsail:GetInstances", + "lightsail:GetInstanceSnapshots", + "lightsail:GetKeyPair", + "lightsail:GetRegions", + "lightsail:GetStaticIps", + "lightsail:IsVpcPeered", + "logs:Describe*", + "machinelearning:Describe*", + "mobilehub:ListAvailableFeatures", + "mobilehub:ListAvailableRegions", + "mobilehub:ListProjects", + "opsworks:Describe*", + "opsworks-cm:Describe*", + "organizations:List*", + "mobiletargeting:GetApplicationSettings", + "mobiletargeting:GetCampaigns", + "mobiletargeting:GetImportJobs", + "mobiletargeting:GetSegments", + "polly:Describe*", + "polly:List*", + "rds:Describe*", + "redshift:DescribeClusters", + "redshift:DescribeEvents", + "redshift:ViewQueriesInConsole", + "route53:List*", + "route53:Get*", + "route53domains:List*", + "s3:ListAllMyBuckets", + "s3:ListBucket", + "sagemaker:Describe*", + "sagemaker:List*", + "sdb:List*", + "servicecatalog:List*", + "ses:List*", + "shield:List*", + "states:ListActivities", + "states:ListStateMachines", + "sns:List*", + "sqs:ListQueues", + "ssm:ListAssociations", + "ssm:ListDocuments", + "storagegateway:ListGateways", + "storagegateway:ListLocalDisks", + "storagegateway:ListVolumeRecoveryPoints", + "storagegateway:ListVolumes", + "swf:List*", + "trustedadvisor:Describe*", + "waf:List*", + "waf-regional:List*", + "workdocs:DescribeAvailableDirectories", + "workdocs:DescribeInstances", + "workmail:Describe*", + "workspaces:Describe*" + ], + "Effect": "Allow", + "Resource": "*" + } + ] + } + }, + "v7": { + "createdDate": "2018-10-15T18:34:54.000Z", + "document": { + "Version": "2012-10-17", + "Statement": [ + { + "Action": [ + "acm:ListCertificates", + "athena:List*", + "aws-marketplace:ViewSubscriptions", + "autoscaling:Describe*", + "batch:ListJobs", + "clouddirectory:ListAppliedSchemaArns", + "clouddirectory:ListDevelopmentSchemaArns", + "clouddirectory:ListDirectories", + "clouddirectory:ListPublishedSchemaArns", + "cloudformation:List*", + "cloudformation:DescribeStacks", + "cloudfront:List*", + "cloudhsm:ListAvailableZones", + "cloudhsm:ListLunaClients", + "cloudhsm:ListHapgs", + "cloudhsm:ListHsms", + "cloudsearch:List*", + "cloudsearch:DescribeDomains", + "cloudtrail:DescribeTrails", + "cloudtrail:LookupEvents", + "cloudwatch:List*", + "cloudwatch:Get*", "codebuild:ListBuilds*", "codebuild:ListProjects", "codecommit:List*", @@ -139699,12 +142250,35 @@ "datapipeline:ListPipelines", "datapipeline:DescribePipelines", "datapipeline:GetAccountLimits", + "dax:DescribeClusters", + "dax:DescribeDefaultParameters", + "dax:DescribeEvents", + "dax:DescribeParameterGroups", + "dax:DescribeParameters", + "dax:DescribeSubnetGroups", + "dax:DescribeTable", + "dax:ListTables", + "dax:ListTags", "devicefarm:List*", "directconnect:Describe*", "discovery:List*", "dms:List*", "ds:DescribeDirectories", + "dynamodb:DescribeBackup", + "dynamodb:DescribeContinuousBackups", + "dynamodb:DescribeGlobalTable", + "dynamodb:DescribeGlobalTableSettings", + "dynamodb:DescribeLimits", + "dynamodb:DescribeReservedCapacity", + "dynamodb:DescribeReservedCapacityOfferings", + "dynamodb:DescribeStream", + "dynamodb:DescribeTable", + "dynamodb:DescribeTimeToLive", + "dynamodb:ListBackups", + "dynamodb:ListGlobalTables", + "dynamodb:ListStreams", "dynamodb:ListTables", + "dynamodb:ListTagsOfResource", "ec2:DescribeAccountAttributes", "ec2:DescribeAddresses", "ec2:DescribeAvailabilityZones", @@ -139735,6 +142309,7 @@ "ec2:DescribeSnapshot*", "ec2:DescribeSpot*", "ec2:DescribeSubnets", + "ec2:DescribeTags", "ec2:DescribeVolume*", "ec2:DescribeVpc*", "ec2:DescribeVpnGateways", @@ -139764,6 +142339,7 @@ "firehose:DescribeDeliveryStream", "gamelift:List*", "glacier:List*", + "greengrass:List*", "iam:List*", "iam:GetAccountSummary", "iam:GetLoginProfile", @@ -139845,8 +142421,8 @@ ] } }, - "v7": { - "createdDate": "2018-10-15T18:34:54.000Z", + "v8": { + "createdDate": "2020-01-16T17:42:09.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -139898,8 +142474,6 @@ "dax:DescribeParameterGroups", "dax:DescribeParameters", "dax:DescribeSubnetGroups", - "dax:DescribeTable", - "dax:ListTables", "dax:ListTags", "devicefarm:List*", "directconnect:Describe*", @@ -140030,6 +142604,8 @@ "route53:List*", "route53:Get*", "route53domains:List*", + "route53resolver:Get*", + "route53resolver:List*", "s3:ListAllMyBuckets", "s3:ListBucket", "sagemaker:Describe*", @@ -140063,8 +142639,8 @@ ] } }, - "v8": { - "createdDate": "2020-01-16T17:42:09.000Z", + "v9": { + "createdDate": "2020-03-09T23:53:28.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -140270,6 +142846,7 @@ "trustedadvisor:Describe*", "waf:List*", "waf-regional:List*", + "wafv2:List*", "workdocs:DescribeAvailableDirectories", "workdocs:DescribeInstances", "workmail:Describe*", @@ -140281,8 +142858,233 @@ ] } }, - "v9": { - "createdDate": "2020-03-09T23:53:28.000Z", + "v11": { + "createdDate": "2021-06-11T19:27:03.000Z", + "document": { + "Version": "2012-10-17", + "Statement": [ + { + "Action": [ + "acm:ListCertificates", + "athena:List*", + "aws-marketplace:ViewSubscriptions", + "autoscaling:Describe*", + "batch:ListJobs", + "clouddirectory:ListAppliedSchemaArns", + "clouddirectory:ListDevelopmentSchemaArns", + "clouddirectory:ListDirectories", + "clouddirectory:ListPublishedSchemaArns", + "cloudformation:List*", + "cloudformation:DescribeStacks", + "cloudfront:List*", + "cloudhsm:ListAvailableZones", + "cloudhsm:ListLunaClients", + "cloudhsm:ListHapgs", + "cloudhsm:ListHsms", + "cloudsearch:List*", + "cloudsearch:DescribeDomains", + "cloudtrail:DescribeTrails", + "cloudtrail:LookupEvents", + "cloudwatch:List*", + "cloudwatch:Get*", + "codebuild:ListBuilds*", + "codebuild:ListProjects", + "codecommit:List*", + "codedeploy:List*", + "codedeploy:Get*", + "codepipeline:ListPipelines", + "codestar:List*", + "cognito-idp:List*", + "cognito-identity:ListIdentities", + "cognito-identity:ListIdentityPools", + "cognito-sync:ListDatasets", + "connect:List*", + "config:List*", + "config:Describe*", + "datapipeline:ListPipelines", + "datapipeline:DescribePipelines", + "datapipeline:GetAccountLimits", + "dax:DescribeClusters", + "dax:DescribeDefaultParameters", + "dax:DescribeEvents", + "dax:DescribeParameterGroups", + "dax:DescribeParameters", + "dax:DescribeSubnetGroups", + "dax:ListTags", + "devicefarm:List*", + "directconnect:Describe*", + "discovery:List*", + "dms:List*", + "ds:DescribeDirectories", + "dynamodb:DescribeBackup", + "dynamodb:DescribeContinuousBackups", + "dynamodb:DescribeGlobalTable", + "dynamodb:DescribeGlobalTableSettings", + "dynamodb:DescribeLimits", + "dynamodb:DescribeReservedCapacity", + "dynamodb:DescribeReservedCapacityOfferings", + "dynamodb:DescribeStream", + "dynamodb:DescribeTable", + "dynamodb:DescribeTimeToLive", + "dynamodb:ListBackups", + "dynamodb:ListGlobalTables", + "dynamodb:ListStreams", + "dynamodb:ListTables", + "dynamodb:ListTagsOfResource", + "ec2:DescribeAccountAttributes", + "ec2:DescribeAddresses", + "ec2:DescribeAvailabilityZones", + "ec2:DescribeBundleTasks", + "ec2:DescribeClassicLinkInstances", + "ec2:DescribeConversionTasks", + "ec2:DescribeCustomerGateways", + "ec2:DescribeDhcpOptions", + "ec2:DescribeExportTasks", + "ec2:DescribeFlowLogs", + "ec2:DescribeHost*", + "ec2:DescribeIdentityIdFormat", + "ec2:DescribeIdFormat", + "ec2:DescribeImage*", + "ec2:DescribeImport*", + "ec2:DescribeInstance*", + "ec2:DescribeInternetGateways", + "ec2:DescribeKeyPairs", + "ec2:DescribeMovingAddresses", + "ec2:DescribeNatGateways", + "ec2:DescribeNetwork*", + "ec2:DescribePlacementGroups", + "ec2:DescribePrefixLists", + "ec2:DescribeRegions", + "ec2:DescribeReserved*", + "ec2:DescribeRouteTables", + "ec2:DescribeSecurityGroups", + "ec2:DescribeSnapshot*", + "ec2:DescribeSpot*", + "ec2:DescribeSubnets", + "ec2:DescribeTags", + "ec2:DescribeVolume*", + "ec2:DescribeVpc*", + "ec2:DescribeVpnGateways", + "ecr:DescribeRepositories", + "ecr:ListImages", + "ecs:List*", + "ecs:Describe*", + "elasticache:Describe*", + "elasticbeanstalk:DescribeApplicationVersions", + "elasticbeanstalk:DescribeApplications", + "elasticbeanstalk:DescribeEnvironments", + "elasticbeanstalk:ListAvailableSolutionStacks", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeTargetGroups", + "elasticfilesystem:DescribeFileSystems", + "elasticloadbalancing:DescribeInstanceHealth", + "elasticloadbalancing:DescribeTargetHealth", + "elasticmapreduce:List*", + "elastictranscoder:List*", + "es:DescribeElasticsearchDomain", + "es:DescribeElasticsearchDomains", + "es:ListDomainNames", + "events:ListRuleNamesByTarget", + "events:ListRules", + "events:ListTargetsByRule", + "firehose:List*", + "firehose:DescribeDeliveryStream", + "fsx:DescribeFileSystems", + "gamelift:List*", + "glacier:List*", + "greengrass:List*", + "iam:List*", + "iam:GetAccountSummary", + "iam:GetLoginProfile", + "importexport:ListJobs", + "inspector:List*", + "iot:List*", + "kinesis:ListStreams", + "kinesisanalytics:ListApplications", + "kms:ListKeys", + "lambda:List*", + "lex:GetBotAliases", + "lex:GetBotChannelAssociations", + "lex:GetBots", + "lex:GetBotVersions", + "lex:GetIntents", + "lex:GetIntentVersions", + "lex:GetSlotTypes", + "lex:GetSlotTypeVersions", + "lex:GetUtterancesView", + "lightsail:GetBlueprints", + "lightsail:GetBundles", + "lightsail:GetInstances", + "lightsail:GetInstanceSnapshots", + "lightsail:GetKeyPair", + "lightsail:GetRegions", + "lightsail:GetStaticIps", + "lightsail:IsVpcPeered", + "logs:Describe*", + "machinelearning:Describe*", + "mobilehub:ListAvailableFeatures", + "mobilehub:ListAvailableRegions", + "mobilehub:ListProjects", + "opsworks:Describe*", + "opsworks-cm:Describe*", + "organizations:List*", + "outposts:GetOutpost", + "outposts:GetOutpostInstanceTypes", + "outposts:ListOutposts", + "outposts:ListSites", + "outposts:ListTagsForResource", + "mobiletargeting:GetApplicationSettings", + "mobiletargeting:GetCampaigns", + "mobiletargeting:GetImportJobs", + "mobiletargeting:GetSegments", + "polly:Describe*", + "polly:List*", + "rds:Describe*", + "redshift:DescribeClusters", + "redshift:DescribeEvents", + "redshift:ViewQueriesInConsole", + "route53:List*", + "route53:Get*", + "route53domains:List*", + "route53resolver:Get*", + "route53resolver:List*", + "s3:ListAllMyBuckets", + "s3:ListBucket", + "sagemaker:Describe*", + "sagemaker:List*", + "sdb:List*", + "servicecatalog:List*", + "ses:List*", + "shield:List*", + "states:ListActivities", + "states:ListStateMachines", + "sns:List*", + "sqs:ListQueues", + "ssm:ListAssociations", + "ssm:ListDocuments", + "storagegateway:ListGateways", + "storagegateway:ListLocalDisks", + "storagegateway:ListVolumeRecoveryPoints", + "storagegateway:ListVolumes", + "swf:List*", + "trustedadvisor:Describe*", + "waf:List*", + "waf-regional:List*", + "wafv2:List*", + "workdocs:DescribeAvailableDirectories", + "workdocs:DescribeInstances", + "workmail:Describe*", + "workspaces:Describe*" + ], + "Effect": "Allow", + "Resource": "*" + } + ] + } + }, + "v12": { + "createdDate": "2021-12-21T02:53:03.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -140317,7 +143119,6 @@ "codedeploy:Get*", "codepipeline:ListPipelines", "codestar:List*", - "codestar:Verify*", "cognito-idp:List*", "cognito-identity:ListIdentities", "cognito-identity:ListIdentityPools", @@ -140389,6 +143190,14 @@ "ec2:DescribeVolume*", "ec2:DescribeVpc*", "ec2:DescribeVpnGateways", + "ec2:DescribeCarrierGateways", + "ec2:DescribeLocalGateways", + "ec2:DescribeLocalGatewayVirtualInterfaces", + "ec2:DescribeLocalGatewayVirtualInterfaceGroups", + "ec2:DescribeLocalGatewayRouteTables", + "ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations", + "ec2:DescribeLocalGatewayRouteTableVpcAssociations", + "ec2:SearchLocalGatewayRoutes", "ecr:DescribeRepositories", "ecr:ListImages", "ecs:List*", @@ -140401,8 +143210,9 @@ "elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeTargetGroups", - "elasticloadbalancing:DescribeTargetHealth", "elasticfilesystem:DescribeFileSystems", + "elasticloadbalancing:DescribeInstanceHealth", + "elasticloadbalancing:DescribeTargetHealth", "elasticmapreduce:List*", "elastictranscoder:List*", "es:DescribeElasticsearchDomain", @@ -140413,6 +143223,7 @@ "events:ListTargetsByRule", "firehose:List*", "firehose:DescribeDeliveryStream", + "fsx:DescribeFileSystems", "gamelift:List*", "glacier:List*", "greengrass:List*", @@ -140451,6 +143262,11 @@ "opsworks:Describe*", "opsworks-cm:Describe*", "organizations:List*", + "outposts:GetOutpost", + "outposts:GetOutpostInstanceTypes", + "outposts:ListOutposts", + "outposts:ListSites", + "outposts:ListTagsForResource", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetCampaigns", "mobiletargeting:GetImportJobs", @@ -140500,8 +143316,8 @@ ] } }, - "v11": { - "createdDate": "2021-06-11T19:27:03.000Z", + "v10": { + "createdDate": "2020-08-18T22:51:43.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -140536,6 +143352,7 @@ "codedeploy:Get*", "codepipeline:ListPipelines", "codestar:List*", + "codestar:Verify*", "cognito-idp:List*", "cognito-identity:ListIdentities", "cognito-identity:ListIdentityPools", @@ -140619,6 +143436,7 @@ "elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeTargetGroups", + "elasticloadbalancing:DescribeTargetHealth", "elasticfilesystem:DescribeFileSystems", "elasticloadbalancing:DescribeInstanceHealth", "elasticloadbalancing:DescribeTargetHealth", @@ -140632,7 +143450,6 @@ "events:ListTargetsByRule", "firehose:List*", "firehose:DescribeDeliveryStream", - "fsx:DescribeFileSystems", "gamelift:List*", "glacier:List*", "greengrass:List*", @@ -140671,11 +143488,6 @@ "opsworks:Describe*", "opsworks-cm:Describe*", "organizations:List*", - "outposts:GetOutpost", - "outposts:GetOutpostInstanceTypes", - "outposts:ListOutposts", - "outposts:ListSites", - "outposts:ListTagsForResource", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetCampaigns", "mobiletargeting:GetImportJobs", @@ -140725,8 +143537,8 @@ ] } }, - "v12": { - "createdDate": "2021-12-21T02:53:03.000Z", + "v13": { + "createdDate": "2022-04-12T19:26:42.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -140896,6 +143708,9 @@ "lightsail:GetRegions", "lightsail:GetStaticIps", "lightsail:IsVpcPeered", + "lookoutvision:ListModels", + "lookoutvision:ListModelPackagingJobs", + "lookoutvision:ListProjects", "logs:Describe*", "machinelearning:Describe*", "mobilehub:ListAvailableFeatures", @@ -140958,229 +143773,8 @@ ] } }, - "v10": { - "createdDate": "2020-08-18T22:51:43.000Z", - "document": { - "Version": "2012-10-17", - "Statement": [ - { - "Action": [ - "acm:ListCertificates", - "athena:List*", - "aws-marketplace:ViewSubscriptions", - "autoscaling:Describe*", - "batch:ListJobs", - "clouddirectory:ListAppliedSchemaArns", - "clouddirectory:ListDevelopmentSchemaArns", - "clouddirectory:ListDirectories", - "clouddirectory:ListPublishedSchemaArns", - "cloudformation:List*", - "cloudformation:DescribeStacks", - "cloudfront:List*", - "cloudhsm:ListAvailableZones", - "cloudhsm:ListLunaClients", - "cloudhsm:ListHapgs", - "cloudhsm:ListHsms", - "cloudsearch:List*", - "cloudsearch:DescribeDomains", - "cloudtrail:DescribeTrails", - "cloudtrail:LookupEvents", - "cloudwatch:List*", - "cloudwatch:Get*", - "codebuild:ListBuilds*", - "codebuild:ListProjects", - "codecommit:List*", - "codedeploy:List*", - "codedeploy:Get*", - "codepipeline:ListPipelines", - "codestar:List*", - "codestar:Verify*", - "cognito-idp:List*", - "cognito-identity:ListIdentities", - "cognito-identity:ListIdentityPools", - "cognito-sync:ListDatasets", - "connect:List*", - "config:List*", - "config:Describe*", - "datapipeline:ListPipelines", - "datapipeline:DescribePipelines", - "datapipeline:GetAccountLimits", - "dax:DescribeClusters", - "dax:DescribeDefaultParameters", - "dax:DescribeEvents", - "dax:DescribeParameterGroups", - "dax:DescribeParameters", - "dax:DescribeSubnetGroups", - "dax:ListTags", - "devicefarm:List*", - "directconnect:Describe*", - "discovery:List*", - "dms:List*", - "ds:DescribeDirectories", - "dynamodb:DescribeBackup", - "dynamodb:DescribeContinuousBackups", - "dynamodb:DescribeGlobalTable", - "dynamodb:DescribeGlobalTableSettings", - "dynamodb:DescribeLimits", - "dynamodb:DescribeReservedCapacity", - "dynamodb:DescribeReservedCapacityOfferings", - "dynamodb:DescribeStream", - "dynamodb:DescribeTable", - "dynamodb:DescribeTimeToLive", - "dynamodb:ListBackups", - "dynamodb:ListGlobalTables", - "dynamodb:ListStreams", - "dynamodb:ListTables", - "dynamodb:ListTagsOfResource", - "ec2:DescribeAccountAttributes", - "ec2:DescribeAddresses", - "ec2:DescribeAvailabilityZones", - "ec2:DescribeBundleTasks", - "ec2:DescribeClassicLinkInstances", - "ec2:DescribeConversionTasks", - "ec2:DescribeCustomerGateways", - "ec2:DescribeDhcpOptions", - "ec2:DescribeExportTasks", - "ec2:DescribeFlowLogs", - "ec2:DescribeHost*", - "ec2:DescribeIdentityIdFormat", - "ec2:DescribeIdFormat", - "ec2:DescribeImage*", - "ec2:DescribeImport*", - "ec2:DescribeInstance*", - "ec2:DescribeInternetGateways", - "ec2:DescribeKeyPairs", - "ec2:DescribeMovingAddresses", - "ec2:DescribeNatGateways", - "ec2:DescribeNetwork*", - "ec2:DescribePlacementGroups", - "ec2:DescribePrefixLists", - "ec2:DescribeRegions", - "ec2:DescribeReserved*", - "ec2:DescribeRouteTables", - "ec2:DescribeSecurityGroups", - "ec2:DescribeSnapshot*", - "ec2:DescribeSpot*", - "ec2:DescribeSubnets", - "ec2:DescribeTags", - "ec2:DescribeVolume*", - "ec2:DescribeVpc*", - "ec2:DescribeVpnGateways", - "ecr:DescribeRepositories", - "ecr:ListImages", - "ecs:List*", - "ecs:Describe*", - "elasticache:Describe*", - "elasticbeanstalk:DescribeApplicationVersions", - "elasticbeanstalk:DescribeApplications", - "elasticbeanstalk:DescribeEnvironments", - "elasticbeanstalk:ListAvailableSolutionStacks", - "elasticloadbalancing:DescribeListeners", - "elasticloadbalancing:DescribeLoadBalancers", - "elasticloadbalancing:DescribeTargetGroups", - "elasticloadbalancing:DescribeTargetHealth", - "elasticfilesystem:DescribeFileSystems", - "elasticloadbalancing:DescribeInstanceHealth", - "elasticloadbalancing:DescribeTargetHealth", - "elasticmapreduce:List*", - "elastictranscoder:List*", - "es:DescribeElasticsearchDomain", - "es:DescribeElasticsearchDomains", - "es:ListDomainNames", - "events:ListRuleNamesByTarget", - "events:ListRules", - "events:ListTargetsByRule", - "firehose:List*", - "firehose:DescribeDeliveryStream", - "gamelift:List*", - "glacier:List*", - "greengrass:List*", - "iam:List*", - "iam:GetAccountSummary", - "iam:GetLoginProfile", - "importexport:ListJobs", - "inspector:List*", - "iot:List*", - "kinesis:ListStreams", - "kinesisanalytics:ListApplications", - "kms:ListKeys", - "lambda:List*", - "lex:GetBotAliases", - "lex:GetBotChannelAssociations", - "lex:GetBots", - "lex:GetBotVersions", - "lex:GetIntents", - "lex:GetIntentVersions", - "lex:GetSlotTypes", - "lex:GetSlotTypeVersions", - "lex:GetUtterancesView", - "lightsail:GetBlueprints", - "lightsail:GetBundles", - "lightsail:GetInstances", - "lightsail:GetInstanceSnapshots", - "lightsail:GetKeyPair", - "lightsail:GetRegions", - "lightsail:GetStaticIps", - "lightsail:IsVpcPeered", - "logs:Describe*", - "machinelearning:Describe*", - "mobilehub:ListAvailableFeatures", - "mobilehub:ListAvailableRegions", - "mobilehub:ListProjects", - "opsworks:Describe*", - "opsworks-cm:Describe*", - "organizations:List*", - "mobiletargeting:GetApplicationSettings", - "mobiletargeting:GetCampaigns", - "mobiletargeting:GetImportJobs", - "mobiletargeting:GetSegments", - "polly:Describe*", - "polly:List*", - "rds:Describe*", - "redshift:DescribeClusters", - "redshift:DescribeEvents", - "redshift:ViewQueriesInConsole", - "route53:List*", - "route53:Get*", - "route53domains:List*", - "route53resolver:Get*", - "route53resolver:List*", - "s3:ListAllMyBuckets", - "s3:ListBucket", - "sagemaker:Describe*", - "sagemaker:List*", - "sdb:List*", - "servicecatalog:List*", - "ses:List*", - "shield:List*", - "states:ListActivities", - "states:ListStateMachines", - "sns:List*", - "sqs:ListQueues", - "ssm:ListAssociations", - "ssm:ListDocuments", - "storagegateway:ListGateways", - "storagegateway:ListLocalDisks", - "storagegateway:ListVolumeRecoveryPoints", - "storagegateway:ListVolumes", - "swf:List*", - "trustedadvisor:Describe*", - "waf:List*", - "waf-regional:List*", - "wafv2:List*", - "workdocs:DescribeAvailableDirectories", - "workdocs:DescribeInstances", - "workmail:Describe*", - "workspaces:Describe*" - ], - "Effect": "Allow", - "Resource": "*" - } - ] - } - }, - "v13": { - "createdDate": "2022-04-12T19:26:42.000Z", + "v14": { + "createdDate": "2022-05-04T18:10:49.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -141188,43 +143782,43 @@ "Action": [ "acm:ListCertificates", "athena:List*", - "aws-marketplace:ViewSubscriptions", "autoscaling:Describe*", + "aws-marketplace:ViewSubscriptions", "batch:ListJobs", "clouddirectory:ListAppliedSchemaArns", "clouddirectory:ListDevelopmentSchemaArns", "clouddirectory:ListDirectories", "clouddirectory:ListPublishedSchemaArns", - "cloudformation:List*", "cloudformation:DescribeStacks", + "cloudformation:List*", "cloudfront:List*", "cloudhsm:ListAvailableZones", - "cloudhsm:ListLunaClients", "cloudhsm:ListHapgs", "cloudhsm:ListHsms", - "cloudsearch:List*", + "cloudhsm:ListLunaClients", "cloudsearch:DescribeDomains", + "cloudsearch:List*", "cloudtrail:DescribeTrails", "cloudtrail:LookupEvents", - "cloudwatch:List*", "cloudwatch:Get*", + "cloudwatch:List*", "codebuild:ListBuilds*", "codebuild:ListProjects", "codecommit:List*", - "codedeploy:List*", "codedeploy:Get*", + "codedeploy:List*", "codepipeline:ListPipelines", "codestar:List*", - "cognito-idp:List*", "cognito-identity:ListIdentities", "cognito-identity:ListIdentityPools", + "cognito-idp:List*", "cognito-sync:ListDatasets", - "connect:List*", - "config:List*", "config:Describe*", - "datapipeline:ListPipelines", + "config:List*", + "connect:List*", "datapipeline:DescribePipelines", "datapipeline:GetAccountLimits", + "datapipeline:ListPipelines", "dax:DescribeClusters", "dax:DescribeDefaultParameters", "dax:DescribeEvents", @@ -141256,6 +143850,7 @@ "ec2:DescribeAddresses", "ec2:DescribeAvailabilityZones", "ec2:DescribeBundleTasks", + "ec2:DescribeCarrierGateways", "ec2:DescribeClassicLinkInstances", "ec2:DescribeConversionTasks", "ec2:DescribeCustomerGateways", @@ -141263,13 +143858,19 @@ "ec2:DescribeExportTasks", "ec2:DescribeFlowLogs", "ec2:DescribeHost*", - "ec2:DescribeIdentityIdFormat", "ec2:DescribeIdFormat", + "ec2:DescribeIdentityIdFormat", "ec2:DescribeImage*", "ec2:DescribeImport*", "ec2:DescribeInstance*", "ec2:DescribeInternetGateways", "ec2:DescribeKeyPairs", + "ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations", + "ec2:DescribeLocalGatewayRouteTableVpcAssociations", + "ec2:DescribeLocalGatewayRouteTables", + "ec2:DescribeLocalGatewayVirtualInterfaceGroups", + "ec2:DescribeLocalGatewayVirtualInterfaces", + "ec2:DescribeLocalGateways", "ec2:DescribeMovingAddresses", "ec2:DescribeNatGateways", "ec2:DescribeNetwork*", @@ -141286,28 +143887,21 @@ "ec2:DescribeVolume*", "ec2:DescribeVpc*", "ec2:DescribeVpnGateways", - "ec2:DescribeCarrierGateways", - "ec2:DescribeLocalGateways", - "ec2:DescribeLocalGatewayVirtualInterfaces", - "ec2:DescribeLocalGatewayVirtualInterfaceGroups", - "ec2:DescribeLocalGatewayRouteTables", - "ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations", - "ec2:DescribeLocalGatewayRouteTableVpcAssociations", "ec2:SearchLocalGatewayRoutes", "ecr:DescribeRepositories", "ecr:ListImages", - "ecs:List*", "ecs:Describe*", + "ecs:List*", "elasticache:Describe*", "elasticbeanstalk:DescribeApplicationVersions", "elasticbeanstalk:DescribeApplications", "elasticbeanstalk:DescribeEnvironments", "elasticbeanstalk:ListAvailableSolutionStacks", + "elasticfilesystem:DescribeFileSystems", + "elasticloadbalancing:DescribeInstanceHealth", "elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeTargetGroups", - "elasticfilesystem:DescribeFileSystems", - "elasticloadbalancing:DescribeInstanceHealth", "elasticloadbalancing:DescribeTargetHealth", "elasticmapreduce:List*", "elastictranscoder:List*", @@ -141317,15 +143911,15 @@ "events:ListRuleNamesByTarget", "events:ListRules", "events:ListTargetsByRule", - "firehose:List*", "firehose:DescribeDeliveryStream", + "firehose:List*", "fsx:DescribeFileSystems", "gamelift:List*", "glacier:List*", "greengrass:List*", - "iam:List*", "iam:GetAccountSummary", "iam:GetLoginProfile", + "iam:List*", "importexport:ListJobs", "inspector:List*", "iot:List*", @@ -141335,49 +143929,53 @@ "lambda:List*", "lex:GetBotAliases", "lex:GetBotChannelAssociations", - "lex:GetBots", "lex:GetBotVersions", - "lex:GetIntents", + "lex:GetBots", "lex:GetIntentVersions", - "lex:GetSlotTypes", + "lex:GetIntents", "lex:GetSlotTypeVersions", + "lex:GetSlotTypes", "lex:GetUtterancesView", "lightsail:GetBlueprints", "lightsail:GetBundles", - "lightsail:GetInstances", "lightsail:GetInstanceSnapshots", + "lightsail:GetInstances", "lightsail:GetKeyPair", "lightsail:GetRegions", "lightsail:GetStaticIps", "lightsail:IsVpcPeered", - "lookoutvision:ListModels", + "logs:Describe*", "lookoutvision:ListModelPackagingJobs", + "lookoutvision:ListModels", "lookoutvision:ListProjects", - "logs:Describe*", "machinelearning:Describe*", + "mediaconnect:ListEntitlements", + "mediaconnect:ListFlows", + "mediaconnect:ListOfferings", + "mediaconnect:ListReservations", "mobilehub:ListAvailableFeatures", "mobilehub:ListAvailableRegions", "mobilehub:ListProjects", - "opsworks:Describe*", + "mobiletargeting:GetApplicationSettings", + "mobiletargeting:GetCampaigns", + "mobiletargeting:GetImportJobs", + "mobiletargeting:GetSegments", "opsworks-cm:Describe*", + "opsworks:Describe*", "organizations:List*", "outposts:GetOutpost", "outposts:GetOutpostInstanceTypes", "outposts:ListOutposts", "outposts:ListSites", "outposts:ListTagsForResource", - "mobiletargeting:GetApplicationSettings", - "mobiletargeting:GetCampaigns", - "mobiletargeting:GetImportJobs", - "mobiletargeting:GetSegments", "polly:Describe*", "polly:List*", "rds:Describe*", "redshift:DescribeClusters", "redshift:DescribeEvents", "redshift:ViewQueriesInConsole", - "route53:List*", "route53:Get*", + "route53:List*", "route53domains:List*", "route53resolver:Get*", "route53resolver:List*", @@ -141389,20 +143987,20 @@ "servicecatalog:List*", "ses:List*", "shield:List*", - "states:ListActivities", - "states:ListStateMachines", "sns:List*", "sqs:ListQueues", "ssm:ListAssociations", "ssm:ListDocuments", + "states:ListActivities", + "states:ListStateMachines", "storagegateway:ListGateways", "storagegateway:ListLocalDisks", "storagegateway:ListVolumeRecoveryPoints", "storagegateway:ListVolumes", "swf:List*", "trustedadvisor:Describe*", - "waf:List*", "waf-regional:List*", + "waf:List*", "wafv2:List*", "workdocs:DescribeAvailableDirectories", "workdocs:DescribeInstances", @@ -141415,8 +144013,8 @@ ] } }, - "v14": { - "createdDate": "2022-05-04T18:10:49.000Z", + "v15": { + "createdDate": "2022-05-06T21:01:44.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -141458,6 +144056,8 @@ "config:Describe*", "config:List*", "connect:List*", + "comprehend:Describe*", + "comprehend:List*", "datapipeline:DescribePipelines", "datapipeline:GetAccountLimits", "datapipeline:ListPipelines", @@ -141534,6 +144134,10 @@ "ecr:ListImages", "ecs:Describe*", "ecs:List*", + "elastic-inference:DescribeAccelerators", + "elastic-inference:DescribeAcceleratorTypes", + "elastic-inference:DescribeAcceleratorOfferings", + "elastic-inference:ListTagsForResource", "elasticache:Describe*", "elasticbeanstalk:DescribeApplicationVersions", "elasticbeanstalk:DescribeApplications", @@ -141655,8 +144259,8 @@ ] } }, - "v15": { - "createdDate": "2022-05-06T21:01:44.000Z", + "v16": { + "createdDate": "2023-01-05T20:51:00.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -141763,6 +144367,7 @@ "ec2:DescribeRegions", "ec2:DescribeReserved*", "ec2:DescribeRouteTables", + "ec2:DescribeSecurityGroupRules", "ec2:DescribeSecurityGroups", "ec2:DescribeSnapshot*", "ec2:DescribeSpot*", @@ -141862,6 +144467,12 @@ "redshift:DescribeClusters", "redshift:DescribeEvents", "redshift:ViewQueriesInConsole", + "resource-explorer-2:GetDefaultView", + "resource-explorer-2:GetIndex", + "resource-explorer-2:ListIndexes", + "resource-explorer-2:ListSupportedResourceTypes", + "resource-explorer-2:ListTagsForResource", + "resource-explorer-2:ListViews", "route53:Get*", "route53:List*", "route53domains:List*", @@ -141901,8 +144512,8 @@ ] } }, - "v16": { - "createdDate": "2023-01-05T20:51:00.000Z", + "v17": { + "createdDate": "2023-03-06T15:59:28.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -142088,9 +144699,6 @@ "mediaconnect:ListFlows", "mediaconnect:ListOfferings", "mediaconnect:ListReservations", - "mobilehub:ListAvailableFeatures", - "mobilehub:ListAvailableRegions", - "mobilehub:ListProjects", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetCampaigns", "mobiletargeting:GetImportJobs", @@ -142154,18 +144762,52 @@ ] } }, - "v17": { - "createdDate": "2023-03-06T15:59:28.000Z", + "v18": { + "createdDate": "2016-11-10T17:20:15.000Z", "document": { "Version": "2012-10-17", "Statement": [ { + "Sid": "GeneralViewOnlyAccessStatement", + "Effect": "Allow", "Action": [ "acm:ListCertificates", "athena:List*", "autoscaling:Describe*", "aws-marketplace:ViewSubscriptions", + "backup:DescribeBackupJob", + "backup:DescribeBackupVault", + "backup:DescribeCopyJob", + "backup:DescribeFramework", + "backup:DescribeGlobalSettings", + "backup:DescribeProtectedResource", + "backup:DescribeRecoveryPoint", + "backup:DescribeRegionSettings", + "backup:DescribeReportJob", + "backup:DescribeReportPlan", + "backup:DescribeRestoreJob", + "backup:GetSupportedResourceTypes", + "backup:ListBackupJobs", + "backup:ListBackupPlanTemplates", + "backup:ListBackupPlanVersions", + "backup:ListBackupPlans", + "backup:ListBackupSelections", + "backup:ListBackupVaults", + "backup:ListCopyJobs", + "backup:ListFrameworks", + "backup:ListLegalHolds", + "backup:ListProtectedResources", + "backup:ListProtectedResourcesByBackupVault", + "backup:ListRecoveryPointsByBackupVault", + "backup:ListRecoveryPointsByLegalHold", + "backup:ListRecoveryPointsByResource", + "backup:ListReportJobs", + "backup:ListReportPlans", + "backup:ListRestoreJobs", + "backup:ListTags", "batch:ListJobs", + "bedrock:ListCustomModels", + "bedrock:ListTagsForResource", "clouddirectory:ListAppliedSchemaArns", "clouddirectory:ListDevelopmentSchemaArns", "clouddirectory:ListDirectories", @@ -142173,13 +144815,10 @@ "cloudformation:DescribeStacks", "cloudformation:List*", "cloudfront:List*", - "cloudhsm:ListAvailableZones", - "cloudhsm:ListHapgs", - "cloudhsm:ListHsms", - "cloudhsm:ListLunaClients", "cloudsearch:DescribeDomains", "cloudsearch:List*", "cloudtrail:DescribeTrails", + "cloudtrail:ListTrails", "cloudtrail:LookupEvents", "cloudwatch:Get*", "cloudwatch:List*", @@ -142194,11 +144833,18 @@ "cognito-identity:ListIdentityPools", "cognito-idp:List*", "cognito-sync:ListDatasets", + "comprehend:Describe*", + "comprehend:List*", "config:Describe*", "config:List*", "connect:List*", - "comprehend:Describe*", - "comprehend:List*", + "cost-optimization-hub:GetPreferences", + "cost-optimization-hub:GetRecommendation", + "cost-optimization-hub:ListEnrollmentStatuses", + "cost-optimization-hub:ListRecommendationSummaries", + "cost-optimization-hub:ListRecommendations", + "databrew:ListJobs", + "databrew:ListProjects", "datapipeline:DescribePipelines", "datapipeline:GetAccountLimits", "datapipeline:ListPipelines", @@ -142225,6 +144871,7 @@ "dynamodb:DescribeTable", "dynamodb:DescribeTimeToLive", "dynamodb:ListBackups", + "dynamodb:ListExports", "dynamodb:ListGlobalTables", "dynamodb:ListStreams", "dynamodb:ListTables", @@ -142272,13 +144919,15 @@ "ec2:DescribeVpc*", "ec2:DescribeVpnGateways", "ec2:SearchLocalGatewayRoutes", + "ecr:DescribeRegistry", "ecr:DescribeRepositories", "ecr:ListImages", "ecs:Describe*", "ecs:List*", - "elastic-inference:DescribeAccelerators", - "elastic-inference:DescribeAcceleratorTypes", + "eks:ListTagsForResource", "elastic-inference:DescribeAcceleratorOfferings", + "elastic-inference:DescribeAcceleratorTypes", + "elastic-inference:DescribeAccelerators", "elastic-inference:ListTagsForResource", "elasticache:Describe*", "elasticbeanstalk:DescribeApplicationVersions", @@ -142293,6 +144942,7 @@ "elasticloadbalancing:DescribeTargetHealth", "elasticmapreduce:List*", "elastictranscoder:List*", + "emr-serverless:ListApplications", "es:DescribeElasticsearchDomain", "es:DescribeElasticsearchDomains", "es:ListDomainNames", @@ -142304,6 +144954,7 @@ "fsx:DescribeFileSystems", "gamelift:List*", "glacier:List*", + "glue:GetTags", "greengrass:List*", "iam:GetAccountSummary", "iam:GetLoginProfile", @@ -142311,9 +144962,14 @@ "importexport:ListJobs", "inspector:List*", "iot:List*", + "kafka:ListClusters", + "kendra:ListDataSources", + "kendra:ListTagsForResource", "kinesis:ListStreams", "kinesisanalytics:ListApplications", + "kinesisanalytics:ListTagsForResource", "kms:ListKeys", + "kms:ListResourceTags", "lambda:List*", "lex:GetBotAliases", "lex:GetBotChannelAssociations", @@ -142333,6 +144989,7 @@ "lightsail:GetStaticIps", "lightsail:IsVpcPeered", "logs:Describe*", + "logs:ListTagsForResource", "lookoutvision:ListModelPackagingJobs", "lookoutvision:ListModels", "lookoutvision:ListProjects", @@ -142345,6 +145002,9 @@ "mobiletargeting:GetCampaigns", "mobiletargeting:GetImportJobs", "mobiletargeting:GetSegments", + "oam:ListAttachedLinks", + "oam:ListLinks", + "oam:ListSinks", "opsworks-cm:Describe*", "opsworks:Describe*", "organizations:List*", @@ -142355,7 +145015,11 @@ "outposts:ListTagsForResource", "polly:Describe*", "polly:List*", + "profile:ListDomains", + "profile:ListIntegrations", "rds:Describe*", + "redshift-serverless:ListTagsForResource", + "redshift-serverless:ListWorkgroups", "redshift:DescribeClusters", "redshift:DescribeEvents", "redshift:ViewQueriesInConsole", @@ -142372,17 +145036,27 @@ "route53resolver:List*", "s3:ListAllMyBuckets", "s3:ListBucket", + "s3:ListMultiRegionAccessPoints", "sagemaker:Describe*", "sagemaker:List*", "sdb:List*", "servicecatalog:List*", + "ses:DescribeActiveReceiptRuleSet", "ses:List*", + "ses:ListDedicatedIpPools", "shield:List*", "sns:List*", + "sqs:GetQueueAttributes", + "sqs:GetQueueUrl", + "sqs:ListDeadLetterSourceQueues", + "sqs:ListMessageMoveTasks", + "sqs:ListQueueTags", "sqs:ListQueues", "ssm:ListAssociations", "ssm:ListDocuments", "states:ListActivities", + "states:ListStateMachineAliases", + "states:ListStateMachineVersions", "states:ListStateMachines", "storagegateway:ListGateways", "storagegateway:ListLocalDisks", @@ -142398,13 +145072,61 @@ "workmail:Describe*", "workspaces:Describe*" ], - "Effect": "Allow", "Resource": "*" + }, + { + "Effect": "Allow", + "Sid": "APIGatewayAccess", + "Action": [ + "apigateway:GET" + ], + "Resource": [ + "arn:aws:apigateway:*::/apis", + "arn:aws:apigateway:*::/apis/*/authorizers/*", + "arn:aws:apigateway:*::/apis/*/authorizers", + "arn:aws:apigateway:*::/apis/*/cors", + "arn:aws:apigateway:*::/apis/*/deployments/*", + "arn:aws:apigateway:*::/apis/*/deployments", + "arn:aws:apigateway:*::/apis/*/exports/*", + "arn:aws:apigateway:*::/apis/*/integrations/*", + "arn:aws:apigateway:*::/apis/*/integrations", + "arn:aws:apigateway:*::/apis/*/models/*", + "arn:aws:apigateway:*::/apis/*/models", + "arn:aws:apigateway:*::/apis/*/routes/*", + "arn:aws:apigateway:*::/apis/*/routes", + "arn:aws:apigateway:*::/apis/*/stages", + "arn:aws:apigateway:*::/apis/*/stages/*", + "arn:aws:apigateway:*::/clientcertificates", + "arn:aws:apigateway:*::/clientcertificates/*", + "arn:aws:apigateway:*::/domainnames", + "arn:aws:apigateway:*::/domainnames/*/apimappings", + "arn:aws:apigateway:*::/restapis", + "arn:aws:apigateway:*::/restapis/*/authorizers/*", + "arn:aws:apigateway:*::/restapis/*/authorizers", + "arn:aws:apigateway:*::/restapis/*/deployments/*", + "arn:aws:apigateway:*::/restapis/*/deployments", + "arn:aws:apigateway:*::/restapis/*/documentation/parts/*", + "arn:aws:apigateway:*::/restapis/*/documentation/parts", + "arn:aws:apigateway:*::/restapis/*/documentation/versions/*", + "arn:aws:apigateway:*::/restapis/*/documentation/versions", + "arn:aws:apigateway:*::/restapis/*/gatewayresponses/*", + "arn:aws:apigateway:*::/restapis/*/gatewayresponses", + "arn:aws:apigateway:*::/restapis/*/models/*", + "arn:aws:apigateway:*::/restapis/*/models", + "arn:aws:apigateway:*::/restapis/*/requestvalidators", + "arn:aws:apigateway:*::/restapis/*/requestvalidators/*", + "arn:aws:apigateway:*::/restapis/*/resources/*", + "arn:aws:apigateway:*::/restapis/*/resources", + "arn:aws:apigateway:*::/restapis/*/stages", + "arn:aws:apigateway:*::/restapis/*/stages/*", + "arn:aws:apigateway:*::/tags/*", + "arn:aws:apigateway:*::/vpclinks" + ] } ] } }, - "v18": { + "v19": { "createdDate": "2016-11-10T17:20:15.000Z", "document": { "Version": "2012-10-17", @@ -142467,6 +145189,13 @@ "codebuild:ListBuilds*", "codebuild:ListProjects", "codecommit:List*", + "codedeploy:BatchGetApplicationRevisions", + "codedeploy:BatchGetApplications", + "codedeploy:BatchGetDeploymentGroups", + "codedeploy:BatchGetDeploymentInstances", + "codedeploy:BatchGetDeploymentTargets", + "codedeploy:BatchGetDeployments", + "codedeploy:BatchGetOnPremisesInstances", "codedeploy:Get*", "codedeploy:List*", "codepipeline:ListPipelines", @@ -142768,7 +145497,7 @@ ] } }, - "v19": { + "v20": { "createdDate": "2016-11-10T17:20:15.000Z", "document": { "Version": "2012-10-17", @@ -142951,6 +145680,7 @@ "elasticloadbalancing:DescribeInstanceHealth", "elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeLoadBalancerAttributes", "elasticloadbalancing:DescribeTargetGroups", "elasticloadbalancing:DescribeTargetHealth", "elasticmapreduce:List*", @@ -143141,7 +145871,7 @@ } }, "createdDate": "2016-11-10T17:20:15.000Z", - "lastUpdatedDate": "2024-06-10T20:57:11.000Z" + "lastUpdatedDate": "2024-10-15T19:05:15.000Z" }, "SupportUser": { "arn": "arn:aws:iam::aws:policy/job-function/SupportUser", @@ -546401,8 +549131,8 @@ }, "AWSResourceExplorerServiceRolePolicy": { "arn": "arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy", - "latestVersionId": "v8", - "versionsCount": 8, + "latestVersionId": "v9", + "versionsCount": 9, "versions": { "v1": { "createdDate": "2022-10-25T20:35:29.000Z", @@ -547013,14 +549743,269 @@ "ec2:DescribeTransitGatewayRouteTables", "ec2:DescribeTransitGateways", "ec2:DescribeVolumes", - "ec2:DescribeVpcEndpointServices", + "ec2:DescribeVpcEndpointServices", + "ec2:DescribeVpcEndpoints", + "ec2:DescribeVpcPeeringConnections", + "ec2:DescribeVpcs", + "ec2:DescribeVpnConnections", + "ec2:DescribeVpnGateways", + "ec2:GetSubnetCidrReservations", + "ecr:DescribeRepositories", + "ecs:DescribeCapacityProviders", + "ecs:DescribeServices", + "ecs:ListClusters", + "ecs:ListContainerInstances", + "ecs:ListServices", + "ecs:ListTaskDefinitions", + "ecs:ListTasks", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeRules", + "elasticloadbalancing:DescribeTargetGroups", + "elasticache:DescribeCacheClusters", + "elasticache:DescribeGlobalReplicationGroups", + "elasticache:DescribeCacheParameterGroups", + "elasticache:DescribeReplicationGroups", + "elasticache:DescribeReservedCacheNodes", + "elasticache:DescribeSnapshots", + "elasticache:DescribeCacheSubnetGroups", + "elasticache:DescribeUsers", + "elasticache:DescribeUserGroups", + "elasticbeanstalk:DescribeApplications", + "elasticbeanstalk:DescribeApplicationVersions", + "elasticbeanstalk:DescribeEnvironments", + "elasticfilesystem:DescribeFileSystems", + "es:ListDomainNames", + "iam:ListGroups", + "iam:ListInstanceProfiles", + "iam:ListOpenIDConnectProviders", + "iam:ListPolicies", + "iam:ListRoles", + "iam:ListSAMLProviders", + "iam:ListServerCertificates", + "iam:ListUsers", + "iot:ListPolicies", + "iot:ListTopicRules", + "kinesis:ListStreamConsumers", + "kinesis:ListStreams", + "lambda:ListCodeSigningConfigs", + "lambda:ListEventSourceMappings", + "lambda:ListFunctions", + "logs:DescribeDestinations", + "logs:DescribeLogGroups", + "logs:DescribeLogStreams", + "rds:DescribeDBClusterEndpoints", + "rds:DescribeDBClusterParameterGroups", + "rds:DescribeDBClusterSnapshots", + "rds:DescribeDBClusters", + "rds:DescribeDBEngineVersions", + "rds:DescribeDBInstanceAutomatedBackups", + "rds:DescribeDBInstances", + "rds:DescribeDBParameterGroups", + "rds:DescribeDBProxies", + "rds:DescribeDBProxyEndpoints", + "rds:DescribeDBSecurityGroups", + "rds:DescribeDBSnapshots", + "rds:DescribeDBSubnetGroups", + "rds:DescribeEventSubscriptions", + "rds:DescribeGlobalClusters", + "rds:DescribeOptionGroups", + "rds:DescribeReservedDBInstances", + "redshift:DescribeClusterParameterGroups", + "redshift:DescribeClusterSnapshots", + "redshift:DescribeClusterSubnetGroups", + "redshift:DescribeClusters", + "redshift:DescribeEventSubscriptions", + "redshift:DescribeSnapshotCopyGrants", + "redshift:DescribeSnapshotSchedules", + "redshift:DescribeUsageLimits", + "resource-explorer-2:GetIndex", + "resource-explorer-2:ListIndexes", + "resource-explorer-2:ListViews", + "s3:GetBucketLocation", + "s3:ListAccessPoints", + "s3:ListAllMyBuckets", + "s3:ListBucket", + "s3:ListStorageLensConfigurations", + "servicecatalog:ListApplications", + "servicecatalog:ListAttributeGroups", + "sns:ListTopics", + "ssm:DescribeAutomationExecutions", + "ssm:DescribeInstanceInformation", + "ssm:DescribeMaintenanceWindowTargets", + "ssm:DescribeMaintenanceWindowTasks", + "ssm:DescribeMaintenanceWindows", + "ssm:DescribeParameters", + "ssm:DescribePatchBaselines", + "ssm:ListAssociations", + "ssm:ListDocuments", + "states:ListStateMachines", + "sqs:ListQueues" + ], + "Resource": [ + "*" + ] + } + ] + } + }, + "v5": { + "createdDate": "2022-10-25T20:35:29.000Z", + "document": { + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "CloudTrailEventsAccess", + "Effect": "Allow", + "Action": [ + "cloudtrail:CreateServiceLinkedChannel" + ], + "Resource": [ + "arn:aws:cloudtrail:*:*:channel/aws-service-channel/resource-explorer-2/*" + ] + }, + { + "Sid": "ApiGatewayAccess", + "Action": [ + "apigateway:GET" + ], + "Effect": "Allow", + "Resource": [ + "arn:aws:apigateway:*::/restapis", + "arn:aws:apigateway:*::/restapis/*/deployments" + ] + }, + { + "Sid": "ResourceInventoryAccess", + "Effect": "Allow", + "Action": [ + "access-analyzer:ListAnalyzers", + "acm-pca:ListCertificateAuthorities", + "amplify:ListApps", + "amplify:ListBackendEnvironments", + "amplify:ListBranches", + "amplify:ListDomainAssociations", + "amplifyuibuilder:ListComponents", + "amplifyuibuilder:ListThemes", + "app-integrations:ListEventIntegrations", + "apprunner:ListServices", + "appstream:DescribeAppBlocks", + "appstream:DescribeApplications", + "appstream:DescribeFleets", + "appstream:DescribeImageBuilders", + "appstream:DescribeStacks", + "appsync:ListGraphqlApis", + "aps:ListRuleGroupsNamespaces", + "aps:ListWorkspaces", + "athena:ListDataCatalogs", + "athena:ListWorkGroups", + "autoscaling:DescribeAutoScalingGroups", + "backup:ListBackupPlans", + "batch:DescribeComputeEnvironments", + "batch:DescribeJobQueues", + "batch:ListSchedulingPolicies", + "cloudformation:ListStacks", + "cloudformation:ListStackSets", + "cloudfront:ListCachePolicies", + "cloudfront:ListCloudFrontOriginAccessIdentities", + "cloudfront:ListDistributions", + "cloudfront:ListFieldLevelEncryptionConfigs", + "cloudfront:ListFieldLevelEncryptionProfiles", + "cloudfront:ListFunctions", + "cloudfront:ListOriginAccessControls", + "cloudfront:ListOriginRequestPolicies", + "cloudfront:ListRealtimeLogConfigs", + "cloudfront:ListResponseHeadersPolicies", + "cloudtrail:ListTrails", + "cloudwatch:DescribeAlarms", + "cloudwatch:DescribeInsightRules", + "cloudwatch:ListDashboards", + "cloudwatch:ListMetricStreams", + "codeartifact:ListDomains", + "codeartifact:ListRepositories", + "codebuild:ListProjects", + "codecommit:ListRepositories", + "codeguru-profiler:ListProfilingGroups", + "codepipeline:ListPipelines", + "codestar-connections:ListConnections", + "cognito-identity:ListIdentityPools", + "cognito-idp:ListUserPools", + "databrew:ListDatasets", + "databrew:ListRecipes", + "databrew:ListRulesets", + "detective:ListGraphs", + "ds:DescribeDirectories", + "dynamodb:ListStreams", + "dynamodb:ListTables", + "ec2:DescribeAddresses", + "ec2:DescribeCapacityReservationFleets", + "ec2:DescribeCapacityReservations", + "ec2:DescribeCarrierGateways", + "ec2:DescribeClientVpnEndpoints", + "ec2:DescribeCustomerGateways", + "ec2:DescribeDhcpOptions", + "ec2:DescribeEgressOnlyInternetGateways", + "ec2:DescribeElasticGpus", + "ec2:DescribeExportImageTasks", + "ec2:DescribeExportTasks", + "ec2:DescribeFleets", + "ec2:DescribeFlowLogs", + "ec2:DescribeFpgaImages", + "ec2:DescribeHostReservations", + "ec2:DescribeHosts", + "ec2:DescribeImages", + "ec2:DescribeImportImageTasks", + "ec2:DescribeImportSnapshotTasks", + "ec2:DescribeInstanceEventWindows", + "ec2:DescribeInstances", + "ec2:DescribeInternetGateways", + "ec2:DescribeIpamPools", + "ec2:DescribeIpams", + "ec2:DescribeIpamScopes", + "ec2:DescribeKeyPairs", + "ec2:DescribeLaunchTemplates", + "ec2:DescribeManagedPrefixLists", + "ec2:DescribeNatGateways", + "ec2:DescribeNetworkAcls", + "ec2:DescribeNetworkInsightsAccessScopeAnalyses", + "ec2:DescribeNetworkInsightsAccessScopes", + "ec2:DescribeNetworkInsightsAnalyses", + "ec2:DescribeNetworkInsightsPaths", + "ec2:DescribeNetworkInterfaces", + "ec2:DescribePlacementGroups", + "ec2:DescribePublicIpv4Pools", + "ec2:DescribeReservedInstances", + "ec2:DescribeRouteTables", + "ec2:DescribeSecurityGroupRules", + "ec2:DescribeSecurityGroups", + "ec2:DescribeSnapshots", + "ec2:DescribeSpotFleetRequests", + "ec2:DescribeSpotInstanceRequests", + "ec2:DescribeSubnets", + "ec2:DescribeTrafficMirrorFilters", + "ec2:DescribeTrafficMirrorSessions", + "ec2:DescribeTrafficMirrorTargets", + "ec2:DescribeTransitGatewayAttachments", + "ec2:DescribeTransitGatewayConnectPeers", + "ec2:DescribeTransitGatewayMulticastDomains", + "ec2:DescribeTransitGatewayPolicyTables", + "ec2:DescribeTransitGatewayRouteTableAnnouncements", + "ec2:DescribeTransitGatewayRouteTables", + "ec2:DescribeTransitGateways", + "ec2:DescribeVerifiedAccessEndpoints", + "ec2:DescribeVerifiedAccessGroups", + "ec2:DescribeVerifiedAccessInstances", + "ec2:DescribeVerifiedAccessTrustProviders", + "ec2:DescribeVolumes", "ec2:DescribeVpcEndpoints", + "ec2:DescribeVpcEndpointServices", "ec2:DescribeVpcPeeringConnections", "ec2:DescribeVpcs", "ec2:DescribeVpnConnections", "ec2:DescribeVpnGateways", "ec2:GetSubnetCidrReservations", "ecr:DescribeRepositories", + "ecr-public:DescribeRepositories", "ecs:DescribeCapacityProviders", "ecs:DescribeServices", "ecs:ListClusters", @@ -547028,24 +550013,52 @@ "ecs:ListServices", "ecs:ListTaskDefinitions", "ecs:ListTasks", - "elasticloadbalancing:DescribeListeners", - "elasticloadbalancing:DescribeLoadBalancers", - "elasticloadbalancing:DescribeRules", - "elasticloadbalancing:DescribeTargetGroups", "elasticache:DescribeCacheClusters", - "elasticache:DescribeGlobalReplicationGroups", "elasticache:DescribeCacheParameterGroups", + "elasticache:DescribeCacheSecurityGroups", + "elasticache:DescribeCacheSubnetGroups", + "elasticache:DescribeGlobalReplicationGroups", "elasticache:DescribeReplicationGroups", "elasticache:DescribeReservedCacheNodes", "elasticache:DescribeSnapshots", - "elasticache:DescribeCacheSubnetGroups", - "elasticache:DescribeUsers", "elasticache:DescribeUserGroups", + "elasticache:DescribeUsers", "elasticbeanstalk:DescribeApplications", "elasticbeanstalk:DescribeApplicationVersions", "elasticbeanstalk:DescribeEnvironments", + "elasticfilesystem:DescribeAccessPoints", "elasticfilesystem:DescribeFileSystems", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeRules", + "elasticloadbalancing:DescribeTargetGroups", "es:ListDomainNames", + "events:ListRules", + "evidently:ListExperiments", + "evidently:ListFeatures", + "evidently:ListLaunches", + "evidently:ListProjects", + "finspace:ListEnvironments", + "firehose:ListDeliveryStreams", + "fis:ListExperimentTemplates", + "forecast:ListDatasetGroups", + "forecast:ListDatasets", + "frauddetector:GetDetectors", + "frauddetector:GetEntityTypes", + "frauddetector:GetEventTypes", + "frauddetector:GetLabels", + "frauddetector:GetOutcomes", + "frauddetector:GetVariables", + "gamelift:ListAliases", + "globalaccelerator:ListAccelerators", + "globalaccelerator:ListEndpointGroups", + "globalaccelerator:ListListeners", + "glue:GetDatabases", + "glue:GetJobs", + "glue:GetTables", + "glue:GetTriggers", + "greengrass:ListGroups", + "healthlake:ListFHIRDatastores", "iam:ListGroups", "iam:ListInstanceProfiles", "iam:ListOpenIDConnectProviders", @@ -547054,20 +550067,78 @@ "iam:ListSAMLProviders", "iam:ListServerCertificates", "iam:ListUsers", + "iam:ListVirtualMFADevices", + "imagebuilder:ListComponentBuildVersions", + "imagebuilder:ListComponents", + "imagebuilder:ListContainerRecipes", + "imagebuilder:ListDistributionConfigurations", + "imagebuilder:ListImageBuildVersions", + "imagebuilder:ListImagePipelines", + "imagebuilder:ListImageRecipes", + "imagebuilder:ListImages", + "imagebuilder:ListInfrastructureConfigurations", + "iotanalytics:ListChannels", + "iotanalytics:ListDatasets", + "iotanalytics:ListDatastores", + "iotanalytics:ListPipelines", + "iotevents:ListAlarmModels", + "iotevents:ListDetectorModels", + "iotevents:ListInputs", + "iot:ListJobTemplates", + "iot:ListAuthorizers", + "iot:ListMitigationActions", "iot:ListPolicies", + "iot:ListProvisioningTemplates", + "iot:ListSecurityProfiles", + "iot:ListThings", + "iot:ListTopicRuleDestinations", "iot:ListTopicRules", + "iotsitewise:ListAssetModels", + "iotsitewise:ListAssets", + "iotsitewise:ListGateways", + "iottwinmaker:ListWorkspaces", + "ivs:ListChannels", + "ivs:ListStreamKeys", + "kafka:ListClusters", "kinesis:ListStreamConsumers", "kinesis:ListStreams", + "kinesisvideo:ListStreams", + "lambda:ListAliases", "lambda:ListCodeSigningConfigs", "lambda:ListEventSourceMappings", "lambda:ListFunctions", + "lambda:ListLayers", + "lambda:ListLayerVersions", "logs:DescribeDestinations", "logs:DescribeLogGroups", "logs:DescribeLogStreams", + "lookoutmetrics:ListAlerts", + "lookoutvision:ListProjects", + "mediapackage:ListChannels", + "mediapackage:ListOriginEndpoints", + "mediatailor:ListPlaybackConfigurations", + "memorydb:DescribeACLs", + "memorydb:DescribeClusters", + "memorydb:DescribeParameterGroups", + "memorydb:DescribeUsers", + "mobiletargeting:GetApps", + "mobiletargeting:GetSegments", + "mobiletargeting:ListTemplates", + "network-firewall:ListFirewallPolicies", + "network-firewall:ListFirewalls", + "networkmanager:DescribeGlobalNetworks", + "networkmanager:GetDevices", + "networkmanager:GetLinks", + "networkmanager:ListAttachments", + "networkmanager:ListCoreNetworks", + "panorama:ListPackages", + "qldb:ListJournalKinesisStreamsForLedger", + "qldb:ListLedgers", + "rds:DescribeBlueGreenDeployments", "rds:DescribeDBClusterEndpoints", "rds:DescribeDBClusterParameterGroups", - "rds:DescribeDBClusterSnapshots", "rds:DescribeDBClusters", + "rds:DescribeDBClusterSnapshots", "rds:DescribeDBEngineVersions", "rds:DescribeDBInstanceAutomatedBackups", "rds:DescribeDBInstances", @@ -547082,35 +550153,60 @@ "rds:DescribeOptionGroups", "rds:DescribeReservedDBInstances", "redshift:DescribeClusterParameterGroups", + "redshift:DescribeClusters", "redshift:DescribeClusterSnapshots", "redshift:DescribeClusterSubnetGroups", - "redshift:DescribeClusters", "redshift:DescribeEventSubscriptions", "redshift:DescribeSnapshotCopyGrants", "redshift:DescribeSnapshotSchedules", "redshift:DescribeUsageLimits", + "refactor-spaces:ListApplications", + "refactor-spaces:ListEnvironments", + "refactor-spaces:ListRoutes", + "refactor-spaces:ListServices", + "rekognition:DescribeProjects", + "resiliencehub:ListApps", + "resiliencehub:ListResiliencyPolicies", "resource-explorer-2:GetIndex", "resource-explorer-2:ListIndexes", "resource-explorer-2:ListViews", + "resource-groups:ListGroups", + "route53-recovery-readiness:ListRecoveryGroups", + "route53-recovery-readiness:ListResourceSets", + "route53resolver:ListFirewallDomainLists", + "route53resolver:ListFirewallRuleGroups", + "route53resolver:ListResolverEndpoints", + "route53resolver:ListResolverRules", "s3:GetBucketLocation", "s3:ListAccessPoints", "s3:ListAllMyBuckets", "s3:ListBucket", "s3:ListStorageLensConfigurations", + "sagemaker:ListModels", + "sagemaker:ListNotebookInstances", "servicecatalog:ListApplications", "servicecatalog:ListAttributeGroups", + "signer:ListSigningProfiles", "sns:ListTopics", + "sqs:ListQueues", "ssm:DescribeAutomationExecutions", "ssm:DescribeInstanceInformation", + "ssm:DescribeMaintenanceWindows", "ssm:DescribeMaintenanceWindowTargets", "ssm:DescribeMaintenanceWindowTasks", - "ssm:DescribeMaintenanceWindows", "ssm:DescribeParameters", "ssm:DescribePatchBaselines", + "ssm-incidents:ListResponsePlans", "ssm:ListAssociations", "ssm:ListDocuments", + "ssm:ListInventoryEntries", + "ssm:ListResourceDataSync", + "states:ListActivities", "states:ListStateMachines", - "sqs:ListQueues" + "timestream:ListDatabases", + "wisdom:listAssistantAssociations", + "wisdom:ListAssistants", + "wisdom:listKnowledgeBases" ], "Resource": [ "*" @@ -547119,7 +550215,7 @@ ] } }, - "v5": { + "v6": { "createdDate": "2022-10-25T20:35:29.000Z", "document": { "Version": "2012-10-17", @@ -547401,6 +550497,11 @@ "networkmanager:GetLinks", "networkmanager:ListAttachments", "networkmanager:ListCoreNetworks", + "organizations:DescribeAccount", + "organizations:DescribeOrganization", + "organizations:ListAccounts", + "organizations:ListAWSServiceAccessForOrganization", + "organizations:ListDelegatedAdministrators", "panorama:ListPackages", "qldb:ListJournalKinesisStreamsForLedger", "qldb:ListLedgers", @@ -547485,7 +550586,7 @@ ] } }, - "v6": { + "v7": { "createdDate": "2022-10-25T20:35:29.000Z", "document": { "Version": "2012-10-17", @@ -547502,10 +550603,10 @@ }, { "Sid": "ApiGatewayAccess", + "Effect": "Allow", "Action": [ "apigateway:GET" ], - "Effect": "Allow", "Resource": [ "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/deployments" @@ -547525,6 +550626,7 @@ "amplifyuibuilder:ListThemes", "app-integrations:ListEventIntegrations", "apprunner:ListServices", + "apprunner:ListVpcConnectors", "appstream:DescribeAppBlocks", "appstream:DescribeApplications", "appstream:DescribeFleets", @@ -547537,6 +550639,7 @@ "athena:ListWorkGroups", "autoscaling:DescribeAutoScalingGroups", "backup:ListBackupPlans", + "backup:ListReportPlans", "batch:DescribeComputeEnvironments", "batch:DescribeJobQueues", "batch:ListSchedulingPolicies", @@ -547668,7 +550771,9 @@ "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeRules", "elasticloadbalancing:DescribeTargetGroups", + "emr-serverless:ListApplications", "es:ListDomainNames", + "events:ListEventBuses", "events:ListRules", "evidently:ListExperiments", "evidently:ListFeatures", @@ -547686,6 +550791,9 @@ "frauddetector:GetOutcomes", "frauddetector:GetVariables", "gamelift:ListAliases", + "geo:ListPlaceIndexes", + "geo:ListTrackers", + "greengrass:ListComponents", "globalaccelerator:ListAccelerators", "globalaccelerator:ListEndpointGroups", "globalaccelerator:ListListeners", @@ -547693,6 +550801,7 @@ "glue:GetJobs", "glue:GetTables", "glue:GetTriggers", + "greengrass:ListComponentVersions", "greengrass:ListGroups", "healthlake:ListFHIRDatastores", "iam:ListGroups", @@ -547725,6 +550834,7 @@ "iot:ListMitigationActions", "iot:ListPolicies", "iot:ListProvisioningTemplates", + "iot:ListRoleAliases", "iot:ListSecurityProfiles", "iot:ListThings", "iot:ListTopicRuleDestinations", @@ -547732,12 +550842,18 @@ "iotsitewise:ListAssetModels", "iotsitewise:ListAssets", "iotsitewise:ListGateways", + "iottwinmaker:ListComponentTypes", + "iottwinmaker:ListEntities", + "iottwinmaker:ListScenes", "iottwinmaker:ListWorkspaces", + "kafka:ListConfigurations", + "kms:ListKeys", "ivs:ListChannels", "ivs:ListStreamKeys", "kafka:ListClusters", "kinesis:ListStreamConsumers", "kinesis:ListStreams", + "kinesisanalytics:ListApplications", "kinesisvideo:ListStreams", "lambda:ListAliases", "lambda:ListCodeSigningConfigs", @@ -547745,6 +550861,8 @@ "lambda:ListFunctions", "lambda:ListLayers", "lambda:ListLayerVersions", + "lex:ListBots", + "lex:ListBotAliases", "logs:DescribeDestinations", "logs:DescribeLogGroups", "logs:DescribeLogStreams", @@ -547752,6 +550870,9 @@ "lookoutvision:ListProjects", "mediapackage:ListChannels", "mediapackage:ListOriginEndpoints", + "mediapackage-vod:ListPackagingConfigurations", + "mediapackage-vod:ListPackagingGroups", + "mq:ListBrokers", "mediatailor:ListPlaybackConfigurations", "memorydb:DescribeACLs", "memorydb:DescribeClusters", @@ -547773,6 +550894,9 @@ "organizations:ListAWSServiceAccessForOrganization", "organizations:ListDelegatedAdministrators", "panorama:ListPackages", + "personalize:ListDatasetGroups", + "personalize:ListDatasets", + "personalize:ListSchemas", "qldb:ListJournalKinesisStreamsForLedger", "qldb:ListLedgers", "rds:DescribeBlueGreenDeployments", @@ -547812,6 +550936,8 @@ "resource-explorer-2:ListIndexes", "resource-explorer-2:ListViews", "resource-groups:ListGroups", + "route53:ListHealthChecks", + "route53:ListHostedZones", "route53-recovery-readiness:ListRecoveryGroups", "route53-recovery-readiness:ListResourceSets", "route53resolver:ListFirewallDomainLists", @@ -547825,6 +550951,7 @@ "s3:ListStorageLensConfigurations", "sagemaker:ListModels", "sagemaker:ListNotebookInstances", + "secretsmanager:ListSecrets", "servicecatalog:ListApplications", "servicecatalog:ListAttributeGroups", "signer:ListSigningProfiles", @@ -547856,7 +550983,7 @@ ] } }, - "v7": { + "v8": { "createdDate": "2022-10-25T20:35:29.000Z", "document": { "Version": "2012-10-17", @@ -547865,7 +550992,8 @@ "Sid": "CloudTrailEventsAccess", "Effect": "Allow", "Action": [ - "cloudtrail:CreateServiceLinkedChannel" + "cloudtrail:CreateServiceLinkedChannel", + "cloudtrail:GetServiceLinkedChannel" ], "Resource": [ "arn:aws:cloudtrail:*:*:channel/aws-service-channel/resource-explorer-2/*" @@ -548253,7 +551381,7 @@ ] } }, - "v8": { + "v9": { "createdDate": "2022-10-25T20:35:29.000Z", "document": { "Version": "2012-10-17", @@ -548265,16 +551393,12 @@ "cloudtrail:CreateServiceLinkedChannel", "cloudtrail:GetServiceLinkedChannel" ], - "Resource": [ - "arn:aws:cloudtrail:*:*:channel/aws-service-channel/resource-explorer-2/*" - ] + "Resource": "arn:aws:cloudtrail:*:*:channel/aws-service-channel/resource-explorer-2/*" }, { "Sid": "ApiGatewayAccess", "Effect": "Allow", - "Action": [ - "apigateway:GET" - ], + "Action": "apigateway:GET", "Resource": [ "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/deployments" @@ -548286,6 +551410,7 @@ "Action": [ "access-analyzer:ListAnalyzers", "acm-pca:ListCertificateAuthorities", + "airflow:ListEnvironments", "amplify:ListApps", "amplify:ListBackendEnvironments", "amplify:ListBranches", @@ -548293,6 +551418,10 @@ "amplifyuibuilder:ListComponents", "amplifyuibuilder:ListThemes", "app-integrations:ListEventIntegrations", + "appflow:ListFlows", + "appmesh:ListMeshes", + "appmesh:ListVirtualNodes", + "appmesh:ListVirtualServices", "apprunner:ListServices", "apprunner:ListVpcConnectors", "appstream:DescribeAppBlocks", @@ -548305,14 +551434,17 @@ "aps:ListWorkspaces", "athena:ListDataCatalogs", "athena:ListWorkGroups", + "auditmanager:GetAccountStatus", + "auditmanager:ListAssessments", "autoscaling:DescribeAutoScalingGroups", "backup:ListBackupPlans", + "backup:ListBackupVaults", "backup:ListReportPlans", "batch:DescribeComputeEnvironments", "batch:DescribeJobQueues", "batch:ListSchedulingPolicies", - "cloudformation:ListStacks", "cloudformation:ListStackSets", + "cloudformation:ListStacks", "cloudfront:ListCachePolicies", "cloudfront:ListCloudFrontOriginAccessIdentities", "cloudfront:ListDistributions", @@ -548333,14 +551465,24 @@ "codebuild:ListProjects", "codecommit:ListRepositories", "codeguru-profiler:ListProfilingGroups", + "codeguru-reviewer:ListRepositoryAssociations", "codepipeline:ListPipelines", "codestar-connections:ListConnections", "cognito-identity:ListIdentityPools", "cognito-idp:ListUserPools", + "connect:ListInstances", + "connect:ListQuickConnects", + "connect:ListUsers", "databrew:ListDatasets", "databrew:ListRecipes", "databrew:ListRulesets", + "databrew:ListSchedules", + "datasync:ListLocations", + "datasync:ListTasks", "detective:ListGraphs", + "dms:DescribeEndpoints", + "dms:DescribeReplicationInstances", + "dms:DescribeReplicationTasks", "ds:DescribeDirectories", "dynamodb:ListStreams", "dynamodb:ListTables", @@ -548367,8 +551509,8 @@ "ec2:DescribeInstances", "ec2:DescribeInternetGateways", "ec2:DescribeIpamPools", - "ec2:DescribeIpams", "ec2:DescribeIpamScopes", + "ec2:DescribeIpams", "ec2:DescribeKeyPairs", "ec2:DescribeLaunchTemplates", "ec2:DescribeManagedPrefixLists", @@ -548404,15 +551546,15 @@ "ec2:DescribeVerifiedAccessInstances", "ec2:DescribeVerifiedAccessTrustProviders", "ec2:DescribeVolumes", - "ec2:DescribeVpcEndpoints", "ec2:DescribeVpcEndpointServices", + "ec2:DescribeVpcEndpoints", "ec2:DescribeVpcPeeringConnections", "ec2:DescribeVpcs", "ec2:DescribeVpnConnections", "ec2:DescribeVpnGateways", "ec2:GetSubnetCidrReservations", - "ecr:DescribeRepositories", "ecr-public:DescribeRepositories", + "ecr:DescribeRepositories", "ecs:DescribeCapacityProviders", "ecs:DescribeServices", "ecs:ListClusters", @@ -548420,6 +551562,7 @@ "ecs:ListServices", "ecs:ListTaskDefinitions", "ecs:ListTasks", + "eks:ListClusters", "elasticache:DescribeCacheClusters", "elasticache:DescribeCacheParameterGroups", "elasticache:DescribeCacheSecurityGroups", @@ -548430,8 +551573,8 @@ "elasticache:DescribeSnapshots", "elasticache:DescribeUserGroups", "elasticache:DescribeUsers", - "elasticbeanstalk:DescribeApplications", "elasticbeanstalk:DescribeApplicationVersions", + "elasticbeanstalk:DescribeApplications", "elasticbeanstalk:DescribeEnvironments", "elasticfilesystem:DescribeAccessPoints", "elasticfilesystem:DescribeFileSystems", @@ -548458,10 +551601,13 @@ "frauddetector:GetLabels", "frauddetector:GetOutcomes", "frauddetector:GetVariables", + "gamelift:DescribeGameSessionQueues", + "gamelift:DescribeMatchmakingConfigurations", + "gamelift:DescribeMatchmakingRuleSets", "gamelift:ListAliases", + "gamelift:ListBuilds", "geo:ListPlaceIndexes", "geo:ListTrackers", - "greengrass:ListComponents", "globalaccelerator:ListAccelerators", "globalaccelerator:ListEndpointGroups", "globalaccelerator:ListListeners", @@ -548469,8 +551615,15 @@ "glue:GetJobs", "glue:GetTables", "glue:GetTriggers", + "glue:ListMLTransforms", "greengrass:ListComponentVersions", + "greengrass:ListComponents", "greengrass:ListGroups", + "groundstation:ListConfigs", + "guardduty:ListDetectors", + "guardduty:ListFilters", + "guardduty:ListIPSets", + "guardduty:ListThreatIntelSets", "healthlake:ListFHIRDatastores", "iam:ListGroups", "iam:ListInstanceProfiles", @@ -548490,15 +551643,8 @@ "imagebuilder:ListImageRecipes", "imagebuilder:ListImages", "imagebuilder:ListInfrastructureConfigurations", - "iotanalytics:ListChannels", - "iotanalytics:ListDatasets", - "iotanalytics:ListDatastores", - "iotanalytics:ListPipelines", - "iotevents:ListAlarmModels", - "iotevents:ListDetectorModels", - "iotevents:ListInputs", - "iot:ListJobTemplates", "iot:ListAuthorizers", + "iot:ListJobTemplates", "iot:ListMitigationActions", "iot:ListPolicies", "iot:ListProvisioningTemplates", @@ -548507,48 +551653,65 @@ "iot:ListThings", "iot:ListTopicRuleDestinations", "iot:ListTopicRules", + "iotanalytics:ListChannels", + "iotanalytics:ListDatasets", + "iotanalytics:ListDatastores", + "iotanalytics:ListPipelines", + "iotevents:ListAlarmModels", + "iotevents:ListDetectorModels", + "iotevents:ListInputs", "iotsitewise:ListAssetModels", "iotsitewise:ListAssets", + "iotsitewise:ListDashboards", "iotsitewise:ListGateways", + "iotsitewise:ListPortals", + "iotsitewise:ListProjects", "iottwinmaker:ListComponentTypes", "iottwinmaker:ListEntities", "iottwinmaker:ListScenes", "iottwinmaker:ListWorkspaces", - "kafka:ListConfigurations", - "kms:ListKeys", + "iotwireless:ListServiceProfiles", "ivs:ListChannels", + "ivs:ListRecordingConfigurations", "ivs:ListStreamKeys", "kafka:ListClusters", + "kafka:ListConfigurations", + "kendra:ListIndices", "kinesis:ListStreamConsumers", "kinesis:ListStreams", "kinesisanalytics:ListApplications", "kinesisvideo:ListStreams", + "kms:ListKeys", "lambda:ListAliases", "lambda:ListCodeSigningConfigs", "lambda:ListEventSourceMappings", "lambda:ListFunctions", - "lambda:ListLayers", "lambda:ListLayerVersions", - "lex:ListBots", + "lambda:ListLayers", "lex:ListBotAliases", + "lex:ListBots", "logs:DescribeDestinations", "logs:DescribeLogGroups", "logs:DescribeLogStreams", "lookoutmetrics:ListAlerts", "lookoutvision:ListProjects", - "mediapackage:ListChannels", - "mediapackage:ListOriginEndpoints", + "macie2:ListCustomDataIdentifiers", + "macie2:ListFindingsFilters", "mediapackage-vod:ListPackagingConfigurations", "mediapackage-vod:ListPackagingGroups", - "mq:ListBrokers", + "mediapackage:ListChannels", + "mediapackage:ListOriginEndpoints", "mediatailor:ListPlaybackConfigurations", "memorydb:DescribeACLs", "memorydb:DescribeClusters", "memorydb:DescribeParameterGroups", + "memorydb:DescribeSubnetGroups", "memorydb:DescribeUsers", "mobiletargeting:GetApps", + "mobiletargeting:GetCampaigns", "mobiletargeting:GetSegments", "mobiletargeting:ListTemplates", + "mq:ListBrokers", "network-firewall:ListFirewallPolicies", "network-firewall:ListFirewalls", "networkmanager:DescribeGlobalNetworks", @@ -548558,20 +551721,26 @@ "networkmanager:ListCoreNetworks", "organizations:DescribeAccount", "organizations:DescribeOrganization", - "organizations:ListAccounts", "organizations:ListAWSServiceAccessForOrganization", + "organizations:ListAccounts", "organizations:ListDelegatedAdministrators", "panorama:ListPackages", "personalize:ListDatasetGroups", "personalize:ListDatasets", "personalize:ListSchemas", + "proton:ListEnvironmentAccountConnections", "qldb:ListJournalKinesisStreamsForLedger", "qldb:ListLedgers", + "quicksight:DescribeAccountSubscription", + "quicksight:ListDataSets", + "quicksight:ListDataSources", + "quicksight:ListTemplates", + "ram:GetResourceShares", "rds:DescribeBlueGreenDeployments", "rds:DescribeDBClusterEndpoints", "rds:DescribeDBClusterParameterGroups", - "rds:DescribeDBClusters", "rds:DescribeDBClusterSnapshots", + "rds:DescribeDBClusters", "rds:DescribeDBEngineVersions", "rds:DescribeDBInstanceAutomatedBackups", "rds:DescribeDBInstances", @@ -548586,9 +551755,9 @@ "rds:DescribeOptionGroups", "rds:DescribeReservedDBInstances", "redshift:DescribeClusterParameterGroups", - "redshift:DescribeClusters", "redshift:DescribeClusterSnapshots", "redshift:DescribeClusterSubnetGroups", + "redshift:DescribeClusters", "redshift:DescribeEventSubscriptions", "redshift:DescribeSnapshotCopyGrants", "redshift:DescribeSnapshotSchedules", @@ -548604,35 +551773,43 @@ "resource-explorer-2:ListIndexes", "resource-explorer-2:ListViews", "resource-groups:ListGroups", - "route53:ListHealthChecks", - "route53:ListHostedZones", + "robomaker:ListRobotApplications", + "robomaker:ListSimulationApplications", "route53-recovery-readiness:ListRecoveryGroups", "route53-recovery-readiness:ListResourceSets", + "route53:ListHealthChecks", + "route53:ListHostedZones", "route53resolver:ListFirewallDomainLists", "route53resolver:ListFirewallRuleGroups", "route53resolver:ListResolverEndpoints", + "route53resolver:ListResolverQueryLogConfigs", "route53resolver:ListResolverRules", "s3:GetBucketLocation", "s3:ListAccessPoints", "s3:ListAllMyBuckets", "s3:ListBucket", "s3:ListStorageLensConfigurations", + "sagemaker:ListDomains", + "sagemaker:ListEndpoints", + "sagemaker:ListFeatureGroups", + "sagemaker:ListImages", "sagemaker:ListModels", "sagemaker:ListNotebookInstances", + "sagemaker:ListPipelines", "secretsmanager:ListSecrets", "servicecatalog:ListApplications", "servicecatalog:ListAttributeGroups", "signer:ListSigningProfiles", "sns:ListTopics", "sqs:ListQueues", + "ssm-incidents:ListResponsePlans", "ssm:DescribeAutomationExecutions", "ssm:DescribeInstanceInformation", - "ssm:DescribeMaintenanceWindows", "ssm:DescribeMaintenanceWindowTargets", "ssm:DescribeMaintenanceWindowTasks", + "ssm:DescribeMaintenanceWindows", "ssm:DescribeParameters", "ssm:DescribePatchBaselines", - "ssm-incidents:ListResponsePlans", "ssm:ListAssociations", "ssm:ListDocuments", "ssm:ListInventoryEntries", @@ -548640,20 +551817,20 @@ "states:ListActivities", "states:ListStateMachines", "timestream:ListDatabases", - "wisdom:listAssistantAssociations", + "transfer:ListWorkflows", "wisdom:ListAssistants", - "wisdom:listKnowledgeBases" + "wisdom:listAssistantAssociations", + "wisdom:listKnowledgeBases", + "workspaces:DescribeWorkspaces" ], - "Resource": [ - "*" - ] + "Resource": "*" } ] } } }, "createdDate": "2022-10-25T20:35:29.000Z", - "lastUpdatedDate": "2024-08-19T15:51:19.000Z" + "lastUpdatedDate": "2024-10-15T16:31:31.000Z" }, "AWSFaultInjectionSimulatorSSMAccess": { "arn": "arn:aws:iam::aws:policy/service-role/AWSFaultInjectionSimulatorSSMAccess",