Policy: AmazonDataZoneFullAccess ARN: arn:aws:iam::aws:policy/AmazonDataZoneFullAccess Allowed Actions Actions Services aoss:CreateSecurityPolicy aoss aoss:GetSecurityPolicy aoss aoss:ListSecurityPolicies aoss bedrock:CreateInferenceProfile bedrock bedrock:DeleteInferenceProfile bedrock bedrock:GetFoundationModel bedrock bedrock:GetFoundationModelAvailability bedrock bedrock:GetInferenceProfile bedrock bedrock:ListFoundationModels bedrock bedrock:ListInferenceProfiles bedrock bedrock:ListTagsForResource bedrock bedrock:TagResource bedrock codeconnections:GetConnection codeconnections codeconnections:ListConnections codeconnections codeconnections:ListTagsForResource codeconnections codeconnections:TagResource codeconnections codeconnections:UntagResource codeconnections codewhisperer:ListProfiles codewhisperer datazone:* datazone ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 glue:GetDatabases glue iam:GetPolicy iam iam:ListRoles iam iam:ListUsers iam iam:PassRole iam kms:Decrypt kms kms:DescribeKey kms kms:ListAliases kms ram:AssociateResourceShare ram ram:CreateResourceShare ram ram:DeleteResourceShare ram ram:DisassociateResourceShare ram ram:GetResourceShareAssociations ram ram:GetResourceShareInvitations ram ram:GetResourceShares ram ram:ListResourceSharePermissions ram ram:RejectResourceShareInvitation ram redshift:DescribeClusters redshift redshift-serverless:ListWorkgroups redshift-serverless s3:CreateBucket s3 s3:GetBucketLocation s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:PutBucketCORS s3 s3:PutBucketPolicy s3 s3:PutBucketVersioning s3 secretsmanager:CreateSecret secretsmanager secretsmanager:ListSecrets secretsmanager secretsmanager:TagResource secretsmanager secretsmanager:TagResource secretsmanager ssm:DeleteParameter ssm ssm:GetParameter ssm ssm:GetParametersByPath ssm ssm:PutParameter ssm sso:DescribeRegisteredRegions sso