Policy: AwsGlueDataBrewFullAccessPolicy ARN: arn:aws:iam::aws:policy/AwsGlueDataBrewFullAccessPolicy Allowed Actions Actions Services appflow:DescribeFlow appflow appflow:DescribeFlowExecutionRecords appflow appflow:ListFlows appflow cloudtrail:LookupEvents cloudtrail databrew:BatchDeleteRecipeVersion databrew databrew:CreateDataset databrew databrew:CreateProfileJob databrew databrew:CreateProject databrew databrew:CreateRecipe databrew databrew:CreateRecipeJob databrew databrew:CreateRuleset databrew databrew:CreateSchedule databrew databrew:DeleteDataset databrew databrew:DeleteJob databrew databrew:DeleteProject databrew databrew:DeleteRecipeVersion databrew databrew:DeleteRuleset databrew databrew:DeleteSchedule databrew databrew:DescribeDataset databrew databrew:DescribeJob databrew databrew:DescribeJobRun databrew databrew:DescribeProject databrew databrew:DescribeRecipe databrew databrew:DescribeRuleset databrew databrew:DescribeSchedule databrew databrew:ListDatasets databrew databrew:ListJobRuns databrew databrew:ListJobs databrew databrew:ListProjects databrew databrew:ListRecipeVersions databrew databrew:ListRecipes databrew databrew:ListRulesets databrew databrew:ListSchedules databrew databrew:ListTagsForResource databrew databrew:PublishRecipe databrew databrew:SendProjectSessionAction databrew databrew:StartJobRun databrew databrew:StartProjectSession databrew databrew:StopJobRun databrew databrew:TagResource databrew databrew:UntagResource databrew databrew:UpdateDataset databrew databrew:UpdateProfileJob databrew databrew:UpdateProject databrew databrew:UpdateRecipe databrew databrew:UpdateRecipeJob databrew databrew:UpdateRuleset databrew databrew:UpdateSchedule databrew dataexchange:CreateJob dataexchange dataexchange:GetJob dataexchange dataexchange:ListDataSetRevisions dataexchange dataexchange:ListDataSets dataexchange dataexchange:ListRevisionAssets dataexchange dataexchange:StartJob dataexchange ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 glue:CreateConnection glue glue:CreateTable glue glue:GetConnection glue glue:GetConnections glue glue:GetDataCatalogEncryptionSettings glue glue:GetDatabases glue glue:GetDatabases glue glue:GetPartitions glue glue:GetTable glue glue:GetTables glue iam:GetRole iam iam:ListRoles iam iam:PassRole iam kms:DescribeKey kms kms:GenerateDataKey kms kms:GenerateRandom kms kms:ListAliases kms kms:ListKeys kms redshift:DescribeClusterSubnetGroups redshift redshift:DescribeClusters redshift redshift-data:DescribeStatement redshift-data redshift-data:ListDatabases redshift-data redshift-data:ListSchemas redshift-data redshift-data:ListTables redshift-data s3:GetBucketCORS s3 s3:GetBucketLocation s3 s3:GetEncryptionConfiguration s3 s3:GetLifecycleConfiguration s3 s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 secretsmanager:CreateSecret secretsmanager secretsmanager:CreateSecret secretsmanager secretsmanager:DescribeSecret secretsmanager secretsmanager:GetSecretValue secretsmanager secretsmanager:ListSecrets secretsmanager sts:GetCallerIdentity sts