Skip to content

Policy: AWSResourceExplorerServiceRolePolicy

ARN: arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy

Allowed Actions

Actions Services
access-analyzer:ListAnalyzers access-analyzer
acm:ListCertificates acm
acm-pca:ListCertificateAuthorities acm-pca
airflow:ListEnvironments airflow
amplify:ListApps amplify
amplify:ListBackendEnvironments amplify
amplify:ListBranches amplify
amplify:ListDomainAssociations amplify
amplifyuibuilder:ListComponents amplifyuibuilder
amplifyuibuilder:ListThemes amplifyuibuilder
apigateway:GET apigateway
app-integrations:ListEventIntegrations app-integrations
appconfig:ListApplications appconfig
appconfig:ListDeploymentStrategies appconfig
appflow:ListFlows appflow
appmesh:ListMeshes appmesh
appmesh:ListVirtualNodes appmesh
appmesh:ListVirtualServices appmesh
apprunner:ListServices apprunner
apprunner:ListVpcConnectors apprunner
appstream:DescribeAppBlocks appstream
appstream:DescribeApplications appstream
appstream:DescribeFleets appstream
appstream:DescribeImageBuilders appstream
appstream:DescribeStacks appstream
appsync:ListGraphqlApis appsync
aps:ListRuleGroupsNamespaces aps
aps:ListWorkspaces aps
athena:ListDataCatalogs athena
athena:ListWorkGroups athena
auditmanager:GetAccountStatus auditmanager
auditmanager:ListAssessments auditmanager
autoscaling:DescribeAutoScalingGroups autoscaling
backup:ListBackupPlans backup
backup:ListBackupVaults backup
backup:ListReportPlans backup
batch:DescribeComputeEnvironments batch
batch:DescribeJobQueues batch
batch:ListSchedulingPolicies batch
ce:GetAnomalyMonitors ce
ce:GetAnomalySubscriptions ce
cloud9:ListEnvironments cloud9
cloudformation:ListResources cloudformation
cloudformation:ListStackSets cloudformation
cloudformation:ListStacks cloudformation
cloudfront:ListCachePolicies cloudfront
cloudfront:ListCloudFrontOriginAccessIdentities cloudfront
cloudfront:ListContinuousDeploymentPolicies cloudfront
cloudfront:ListDistributions cloudfront
cloudfront:ListFieldLevelEncryptionConfigs cloudfront
cloudfront:ListFieldLevelEncryptionProfiles cloudfront
cloudfront:ListFunctions cloudfront
cloudfront:ListOriginAccessControls cloudfront
cloudfront:ListOriginRequestPolicies cloudfront
cloudfront:ListRealtimeLogConfigs cloudfront
cloudfront:ListResponseHeadersPolicies cloudfront
cloudtrail:CreateServiceLinkedChannel cloudtrail
cloudtrail:GetServiceLinkedChannel cloudtrail
cloudtrail:ListChannels cloudtrail
cloudtrail:ListEventDataStores cloudtrail
cloudtrail:ListTrails cloudtrail
cloudwatch:DescribeAlarms cloudwatch
cloudwatch:DescribeInsightRules cloudwatch
cloudwatch:ListDashboards cloudwatch
cloudwatch:ListMetricStreams cloudwatch
codeartifact:ListDomains codeartifact
codeartifact:ListRepositories codeartifact
codebuild:ListProjects codebuild
codecommit:ListRepositories codecommit
codeconnections:ListConnections codeconnections
codedeploy:ListApplications codedeploy
codedeploy:ListDeploymentConfigs codedeploy
codeguru-profiler:ListProfilingGroups codeguru-profiler
codeguru-reviewer:ListRepositoryAssociations codeguru-reviewer
codepipeline:ListPipelines codepipeline
codepipeline:ListWebhooks codepipeline
codestar-connections:ListConnections codestar-connections
cognito-identity:ListIdentityPools cognito-identity
cognito-idp:ListUserPools cognito-idp
comprehend:ListDocumentClassifiers comprehend
comprehend:ListEntityRecognizers comprehend
connect:ListInstances connect
connect:ListPhoneNumbersV2 connect
connect:ListQuickConnects connect
connect:ListRules connect
connect:ListTaskTemplates connect
connect:ListUsers connect
databrew:ListDatasets databrew
databrew:ListJobs databrew
databrew:ListProjects databrew
databrew:ListRecipes databrew
databrew:ListRulesets databrew
databrew:ListSchedules databrew
dataexchange:ListDataSets dataexchange
datapipeline:ListPipelines datapipeline
datasync:ListLocations datasync
datasync:ListTasks datasync
dax:DescribeClusters dax
detective:ListGraphs detective
devicefarm:ListProjects devicefarm
devicefarm:ListTestGridProjects devicefarm
dms:DescribeEndpoints dms
dms:DescribeEventSubscriptions dms
dms:DescribeReplicationInstances dms
dms:DescribeReplicationSubnetGroups dms
dms:DescribeReplicationTasks dms
ds:DescribeDirectories ds
dynamodb:ListStreams dynamodb
dynamodb:ListTables dynamodb
ec2:DescribeAddresses ec2
ec2:DescribeCapacityReservationFleets ec2
ec2:DescribeCapacityReservations ec2
ec2:DescribeCarrierGateways ec2
ec2:DescribeClientVpnEndpoints ec2
ec2:DescribeCustomerGateways ec2
ec2:DescribeDhcpOptions ec2
ec2:DescribeEgressOnlyInternetGateways ec2
ec2:DescribeElasticGpus ec2
ec2:DescribeExportImageTasks ec2
ec2:DescribeExportTasks ec2
ec2:DescribeFleets ec2
ec2:DescribeFlowLogs ec2
ec2:DescribeFpgaImages ec2
ec2:DescribeHostReservations ec2
ec2:DescribeHosts ec2
ec2:DescribeImages ec2
ec2:DescribeImportImageTasks ec2
ec2:DescribeImportSnapshotTasks ec2
ec2:DescribeInstanceEventWindows ec2
ec2:DescribeInstances ec2
ec2:DescribeInternetGateways ec2
ec2:DescribeIpamPools ec2
ec2:DescribeIpamResourceDiscoveries ec2
ec2:DescribeIpamResourceDiscoveryAssociations ec2
ec2:DescribeIpamScopes ec2
ec2:DescribeIpams ec2
ec2:DescribeKeyPairs ec2
ec2:DescribeLaunchTemplates ec2
ec2:DescribeManagedPrefixLists ec2
ec2:DescribeNatGateways ec2
ec2:DescribeNetworkAcls ec2
ec2:DescribeNetworkInsightsAccessScopeAnalyses ec2
ec2:DescribeNetworkInsightsAccessScopes ec2
ec2:DescribeNetworkInsightsAnalyses ec2
ec2:DescribeNetworkInsightsPaths ec2
ec2:DescribeNetworkInterfaces ec2
ec2:DescribePlacementGroups ec2
ec2:DescribePublicIpv4Pools ec2
ec2:DescribeReservedInstances ec2
ec2:DescribeRouteTables ec2
ec2:DescribeSecurityGroupRules ec2
ec2:DescribeSecurityGroups ec2
ec2:DescribeSnapshots ec2
ec2:DescribeSpotFleetRequests ec2
ec2:DescribeSpotInstanceRequests ec2
ec2:DescribeSubnets ec2
ec2:DescribeTrafficMirrorFilters ec2
ec2:DescribeTrafficMirrorSessions ec2
ec2:DescribeTrafficMirrorTargets ec2
ec2:DescribeTransitGatewayAttachments ec2
ec2:DescribeTransitGatewayConnectPeers ec2
ec2:DescribeTransitGatewayMulticastDomains ec2
ec2:DescribeTransitGatewayPolicyTables ec2
ec2:DescribeTransitGatewayRouteTableAnnouncements ec2
ec2:DescribeTransitGatewayRouteTables ec2
ec2:DescribeTransitGateways ec2
ec2:DescribeVerifiedAccessEndpoints ec2
ec2:DescribeVerifiedAccessGroups ec2
ec2:DescribeVerifiedAccessInstances ec2
ec2:DescribeVerifiedAccessTrustProviders ec2
ec2:DescribeVolumes ec2
ec2:DescribeVpcEndpointServices ec2
ec2:DescribeVpcEndpoints ec2
ec2:DescribeVpcPeeringConnections ec2
ec2:DescribeVpcs ec2
ec2:DescribeVpnConnections ec2
ec2:DescribeVpnGateways ec2
ec2:GetSubnetCidrReservations ec2
ecr:DescribeRepositories ecr
ecr-public:DescribeRepositories ecr-public
ecs:DescribeCapacityProviders ecs
ecs:DescribeServices ecs
ecs:ListClusters ecs
ecs:ListContainerInstances ecs
ecs:ListServices ecs
ecs:ListTaskDefinitions ecs
ecs:ListTasks ecs
eks:ListClusters eks
elasticache:DescribeCacheClusters elasticache
elasticache:DescribeCacheParameterGroups elasticache
elasticache:DescribeCacheSecurityGroups elasticache
elasticache:DescribeCacheSubnetGroups elasticache
elasticache:DescribeGlobalReplicationGroups elasticache
elasticache:DescribeReplicationGroups elasticache
elasticache:DescribeReservedCacheNodes elasticache
elasticache:DescribeSnapshots elasticache
elasticache:DescribeUserGroups elasticache
elasticache:DescribeUsers elasticache
elasticbeanstalk:DescribeApplicationVersions elasticbeanstalk
elasticbeanstalk:DescribeApplications elasticbeanstalk
elasticbeanstalk:DescribeEnvironments elasticbeanstalk
elasticfilesystem:DescribeAccessPoints elasticfilesystem
elasticfilesystem:DescribeFileSystems elasticfilesystem
elasticloadbalancing:DescribeListeners elasticloadbalancing
elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing
elasticloadbalancing:DescribeRules elasticloadbalancing
elasticloadbalancing:DescribeTargetGroups elasticloadbalancing
elasticmapreduce:ListClusters elasticmapreduce
emr-containers:ListVirtualClusters emr-containers
emr-serverless:ListApplications emr-serverless
es:ListDomainNames es
events:ListApiDestinations events
events:ListArchives events
events:ListConnections events
events:ListEndpoints events
events:ListEventBuses events
events:ListRules events
evidently:ListExperiments evidently
evidently:ListFeatures evidently
evidently:ListLaunches evidently
evidently:ListProjects evidently
finspace:ListEnvironments finspace
firehose:ListDeliveryStreams firehose
fis:ListExperimentTemplates fis
forecast:ListDatasetGroups forecast
forecast:ListDatasetImportJobs forecast
forecast:ListDatasets forecast
forecast:ListForecastExportJobs forecast
forecast:ListForecasts forecast
forecast:ListPredictorBacktestExportJobs forecast
forecast:ListPredictors forecast
frauddetector:GetDetectors frauddetector
frauddetector:GetEntityTypes frauddetector
frauddetector:GetEventTypes frauddetector
frauddetector:GetExternalModels frauddetector
frauddetector:GetLabels frauddetector
frauddetector:GetModels frauddetector
frauddetector:GetOutcomes frauddetector
frauddetector:GetVariables frauddetector
fsx:DescribeFileSystems fsx
gamelift:DescribeGameSessionQueues gamelift
gamelift:DescribeMatchmakingConfigurations gamelift
gamelift:DescribeMatchmakingRuleSets gamelift
gamelift:ListAliases gamelift
gamelift:ListBuilds gamelift
gamelift:ListLocations gamelift
geo:ListMaps geo
geo:ListPlaceIndexes geo
geo:ListTrackers geo
glacier:ListVaults glacier
globalaccelerator:ListAccelerators globalaccelerator
globalaccelerator:ListEndpointGroups globalaccelerator
globalaccelerator:ListListeners globalaccelerator
glue:GetCrawlers glue
glue:GetDatabases glue
glue:GetJobs glue
glue:GetTables glue
glue:GetTriggers glue
glue:ListMLTransforms glue
grafana:ListWorkspaces grafana
greengrass:ListComponentVersions greengrass
greengrass:ListComponents greengrass
greengrass:ListConnectorDefinitions greengrass
greengrass:ListCoreDefinitions greengrass
greengrass:ListDeviceDefinitions greengrass
greengrass:ListFunctionDefinitions greengrass
greengrass:ListGroups greengrass
greengrass:ListLoggerDefinitions greengrass
greengrass:ListResourceDefinitions greengrass
greengrass:ListSubscriptionDefinitions greengrass
groundstation:ListConfigs groundstation
groundstation:ListDataflowEndpointGroups groundstation
groundstation:ListMissionProfiles groundstation
guardduty:ListDetectors guardduty
guardduty:ListFilters guardduty
guardduty:ListIPSets guardduty
guardduty:ListThreatIntelSets guardduty
healthlake:ListFHIRDatastores healthlake
iam:ListGroups iam
iam:ListInstanceProfiles iam
iam:ListOpenIDConnectProviders iam
iam:ListPolicies iam
iam:ListRoles iam
iam:ListSAMLProviders iam
iam:ListServerCertificates iam
iam:ListUsers iam
iam:ListVirtualMFADevices iam
imagebuilder:ListComponentBuildVersions imagebuilder
imagebuilder:ListComponents imagebuilder
imagebuilder:ListContainerRecipes imagebuilder
imagebuilder:ListDistributionConfigurations imagebuilder
imagebuilder:ListImageBuildVersions imagebuilder
imagebuilder:ListImagePipelines imagebuilder
imagebuilder:ListImageRecipes imagebuilder
imagebuilder:ListImages imagebuilder
imagebuilder:ListInfrastructureConfigurations imagebuilder
inspector:ListAssessmentTemplates inspector
iot:ListAuthorizers iot
iot:ListCACertificates iot
iot:ListCertificates iot
iot:ListJobTemplates iot
iot:ListMitigationActions iot
iot:ListPolicies iot
iot:ListProvisioningTemplates iot
iot:ListRoleAliases iot
iot:ListSecurityProfiles iot
iot:ListThings iot
iot:ListTopicRuleDestinations iot
iot:ListTopicRules iot
iotanalytics:ListChannels iotanalytics
iotanalytics:ListDatasets iotanalytics
iotanalytics:ListDatastores iotanalytics
iotanalytics:ListPipelines iotanalytics
iotdeviceadvisor:ListSuiteDefinitions iotdeviceadvisor
iotevents:ListAlarmModels iotevents
iotevents:ListDetectorModels iotevents
iotevents:ListInputs iotevents
iotfleetwise:ListDecoderManifests iotfleetwise
iotfleetwise:ListModelManifests iotfleetwise
iotfleetwise:ListSignalCatalogs iotfleetwise
iotfleetwise:ListVehicles iotfleetwise
iotsitewise:ListAssetModels iotsitewise
iotsitewise:ListAssets iotsitewise
iotsitewise:ListDashboards iotsitewise
iotsitewise:ListGateways iotsitewise
iotsitewise:ListPortals iotsitewise
iotsitewise:ListProjects iotsitewise
iottwinmaker:ListComponentTypes iottwinmaker
iottwinmaker:ListEntities iottwinmaker
iottwinmaker:ListScenes iottwinmaker
iottwinmaker:ListSyncJobs iottwinmaker
iottwinmaker:ListWorkspaces iottwinmaker
iotwireless:ListServiceProfiles iotwireless
ivs:ListChannels ivs
ivs:ListRecordingConfigurations ivs
ivs:ListStreamKeys ivs
ivschat:ListLoggingConfigurations ivschat
ivschat:ListRooms ivschat
kafka:ListClusters kafka
kafka:ListConfigurations kafka
kendra:ListIndices kendra
kinesis:ListStreamConsumers kinesis
kinesis:ListStreams kinesis
kinesisanalytics:ListApplications kinesisanalytics
kinesisvideo:ListStreams kinesisvideo
kms:ListAliases kms
kms:ListKeys kms
lambda:ListAliases lambda
lambda:ListCodeSigningConfigs lambda
lambda:ListEventSourceMappings lambda
lambda:ListFunctions lambda
lambda:ListLayerVersions lambda
lambda:ListLayers lambda
lex:ListBotAliases lex
lex:ListBots lex
license-manager:ListDistributedGrants license-manager
lightsail:GetBuckets lightsail
lightsail:GetCertificates lightsail
lightsail:GetContainerServices lightsail
lightsail:GetDisks lightsail
logs:DescribeDestinations logs
logs:DescribeLogGroups logs
logs:DescribeLogStreams logs
lookoutmetrics:ListAlerts lookoutmetrics
lookoutmetrics:ListAnomalyDetectors lookoutmetrics
lookoutvision:ListProjects lookoutvision
m2:ListEnvironments m2
macie2:ListAllowLists macie2
macie2:ListCustomDataIdentifiers macie2
macie2:ListFindingsFilters macie2
managedblockchain:ListAccessors managedblockchain
mediapackage:ListChannels mediapackage
mediapackage:ListOriginEndpoints mediapackage
mediapackage-vod:ListPackagingConfigurations mediapackage-vod
mediapackage-vod:ListPackagingGroups mediapackage-vod
mediatailor:ListPlaybackConfigurations mediatailor
memorydb:DescribeACLs memorydb
memorydb:DescribeClusters memorydb
memorydb:DescribeParameterGroups memorydb
memorydb:DescribeSubnetGroups memorydb
memorydb:DescribeUsers memorydb
mobiletargeting:GetApps mobiletargeting
mobiletargeting:GetCampaigns mobiletargeting
mobiletargeting:GetSegments mobiletargeting
mobiletargeting:ListTemplates mobiletargeting
mq:ListBrokers mq
network-firewall:ListFirewallPolicies network-firewall
network-firewall:ListFirewalls network-firewall
networkmanager:DescribeGlobalNetworks networkmanager
networkmanager:GetDevices networkmanager
networkmanager:GetLinks networkmanager
networkmanager:ListAttachments networkmanager
networkmanager:ListCoreNetworks networkmanager
oam:ListSinks oam
omics:ListReferenceStores omics
omics:ListRunGroups omics
omics:ListWorkflows omics
organizations:DescribeAccount organizations
organizations:DescribeOrganization organizations
organizations:ListAWSServiceAccessForOrganization organizations
organizations:ListAccounts organizations
organizations:ListDelegatedAdministrators organizations
organizations:ListOrganizationalUnitsForParent organizations
organizations:ListRoots organizations
outposts:ListSites outposts
panorama:ListPackages panorama
personalize:ListDatasetGroups personalize
personalize:ListDatasets personalize
personalize:ListSchemas personalize
personalize:ListSolutions personalize
pipes:ListPipes pipes
proton:ListEnvironmentAccountConnections proton
qldb:ListJournalKinesisStreamsForLedger qldb
qldb:ListLedgers qldb
quicksight:DescribeAccountSubscription quicksight
quicksight:ListDataSets quicksight
quicksight:ListDataSources quicksight
quicksight:ListTemplates quicksight
quicksight:ListThemes quicksight
ram:GetResourceShares ram
rds:DescribeBlueGreenDeployments rds
rds:DescribeDBClusterEndpoints rds
rds:DescribeDBClusterParameterGroups rds
rds:DescribeDBClusterSnapshots rds
rds:DescribeDBClusters rds
rds:DescribeDBEngineVersions rds
rds:DescribeDBInstanceAutomatedBackups rds
rds:DescribeDBInstances rds
rds:DescribeDBParameterGroups rds
rds:DescribeDBProxies rds
rds:DescribeDBProxyEndpoints rds
rds:DescribeDBSecurityGroups rds
rds:DescribeDBSnapshots rds
rds:DescribeDBSubnetGroups rds
rds:DescribeEventSubscriptions rds
rds:DescribeGlobalClusters rds
rds:DescribeOptionGroups rds
rds:DescribeReservedDBInstances rds
redshift:DescribeClusterParameterGroups redshift
redshift:DescribeClusterSnapshots redshift
redshift:DescribeClusterSubnetGroups redshift
redshift:DescribeClusters redshift
redshift:DescribeEventSubscriptions redshift
redshift:DescribeSnapshotCopyGrants redshift
redshift:DescribeSnapshotSchedules redshift
redshift:DescribeUsageLimits redshift
refactor-spaces:ListApplications refactor-spaces
refactor-spaces:ListEnvironments refactor-spaces
refactor-spaces:ListRoutes refactor-spaces
refactor-spaces:ListServices refactor-spaces
rekognition:DescribeProjects rekognition
resiliencehub:ListApps resiliencehub
resiliencehub:ListResiliencyPolicies resiliencehub
resource-explorer-2:GetIndex resource-explorer-2
resource-explorer-2:ListIndexes resource-explorer-2
resource-explorer-2:ListViews resource-explorer-2
resource-groups:ListGroups resource-groups
robomaker:ListRobotApplications robomaker
robomaker:ListSimulationApplications robomaker
route53:ListHealthChecks route53
route53:ListHostedZones route53
route53-recovery-control-config:ListClusters route53-recovery-control-config
route53-recovery-control-config:ListControlPanels route53-recovery-control-config
route53-recovery-control-config:ListSafetyRules route53-recovery-control-config
route53-recovery-readiness:ListReadinessChecks route53-recovery-readiness
route53-recovery-readiness:ListRecoveryGroups route53-recovery-readiness
route53-recovery-readiness:ListResourceSets route53-recovery-readiness
route53domains:ListDomains route53domains
route53resolver:ListFirewallDomainLists route53resolver
route53resolver:ListFirewallRuleGroupAssociations route53resolver
route53resolver:ListFirewallRuleGroups route53resolver
route53resolver:ListResolverEndpoints route53resolver
route53resolver:ListResolverQueryLogConfigs route53resolver
route53resolver:ListResolverRules route53resolver
rum:ListAppMonitors rum
s3:GetBucketLocation s3
s3:ListAccessPoints s3
s3:ListAllMyBuckets s3
s3:ListBucket s3
s3:ListMultiRegionAccessPoints s3
s3:ListStorageLensConfigurations s3
sagemaker:ListAppImageConfigs sagemaker
sagemaker:ListDomains sagemaker
sagemaker:ListEndpoints sagemaker
sagemaker:ListFeatureGroups sagemaker
sagemaker:ListImages sagemaker
sagemaker:ListModels sagemaker
sagemaker:ListNotebookInstances sagemaker
sagemaker:ListPipelines sagemaker
scheduler:ListScheduleGroups scheduler
scheduler:ListSchedules scheduler
schemas:ListDiscoverers schemas
secretsmanager:ListSecrets secretsmanager
servicecatalog:ListApplications servicecatalog
servicecatalog:ListAttributeGroups servicecatalog
servicediscovery:ListServices servicediscovery
ses:ListConfigurationSets ses
ses:ListContactLists ses
ses:ListEmailIdentities ses
signer:ListSigningProfiles signer
sns:ListTopics sns
sqs:ListQueues sqs
ssm:DescribeAutomationExecutions ssm
ssm:DescribeInstanceInformation ssm
ssm:DescribeMaintenanceWindowTargets ssm
ssm:DescribeMaintenanceWindowTasks ssm
ssm:DescribeMaintenanceWindows ssm
ssm:DescribeParameters ssm
ssm:DescribePatchBaselines ssm
ssm:ListAssociations ssm
ssm:ListDocuments ssm
ssm:ListInventoryEntries ssm
ssm:ListResourceDataSync ssm
ssm-incidents:ListResponsePlans ssm-incidents
states:ListActivities states
states:ListStateMachines states
storagegateway:ListGateways storagegateway
synthetics:ListGroups synthetics
timestream:ListDatabases timestream
timestream:ListScheduledQueries timestream
transfer:ListAgreements transfer
transfer:ListCertificates transfer
transfer:ListConnectors transfer
transfer:ListProfiles transfer
transfer:ListServers transfer
transfer:ListWorkflows transfer
wisdom:ListAssistants wisdom
wisdom:listAssistantAssociations wisdom
wisdom:listKnowledgeBases wisdom
workspaces:DescribeConnectionAliases workspaces
workspaces:DescribeWorkspaces workspaces