Policy: AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy

ARN: arn:aws:iam::aws:policy/aws-service-role/AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy

Allowed Actions

Actions	Services
cloudformation:CreateChangeSet	cloudformation
cloudformation:CreateStack	cloudformation
cloudformation:DeleteStack	cloudformation
cloudformation:DescribeChangeSet	cloudformation
cloudformation:DescribeStackResources	cloudformation
cloudformation:DescribeStacks	cloudformation
cloudformation:ExecuteChangeSet	cloudformation
cloudformation:GetTemplateSummary	cloudformation
cloudformation:UpdateTermination*	cloudformation
config:DescribeAggregationAuthorizations	config
config:PutAggregationAuthorization	config
config:PutConfigRule	config
config:TagResource	config
s3:CreateBucket	s3
s3:DeleteBucket	s3
s3:DeleteBucketPolicy	s3
s3:DeleteObject	s3
s3:GetBucketAcl	s3
s3:GetBucketPolicy	s3
s3:ListBucket	s3
s3:ListBucketVersions	s3
s3:PutBucketAcl	s3
s3:PutBucketLogging	s3
s3:PutBucketObjectLockConfiguration	s3
s3:PutBucketPolicy	s3
s3:PutBucketPublicAccessBlock	s3
s3:PutBucketTagging	s3
s3:PutBucketVersioning	s3
s3:PutEncryptionConfiguration	s3
s3:PutObject	s3