Skip to content

Policy: AWSTrustedAdvisorServiceRolePolicy

ARN: arn:aws:iam::aws:policy/aws-service-role/AWSTrustedAdvisorServiceRolePolicy

Allowed Actions

Actions Services
access-analyzer:ListAnalyzers access-analyzer
autoscaling:DescribeAccountLimits autoscaling
autoscaling:DescribeAutoScalingGroups autoscaling
autoscaling:DescribeLaunchConfigurations autoscaling
ce:GetReservationPurchaseRecommendation ce
ce:GetSavingsPlansPurchaseRecommendation ce
cloudformation:DescribeAccountLimits cloudformation
cloudformation:DescribeStacks cloudformation
cloudformation:ListStacks cloudformation
cloudfront:ListDistributions cloudfront
cloudtrail:DescribeTrails cloudtrail
cloudtrail:GetEventSelectors cloudtrail
cloudtrail:GetTrail cloudtrail
cloudtrail:GetTrailStatus cloudtrail
cloudtrail:ListTrails cloudtrail
cloudwatch:GetMetricStatistics cloudwatch
cloudwatch:ListMetrics cloudwatch
dax:DescribeClusters dax
dynamodb:DescribeLimits dynamodb
dynamodb:DescribeTable dynamodb
dynamodb:ListTables dynamodb
ec2:DescribeAddresses ec2
ec2:DescribeImages ec2
ec2:DescribeInstances ec2
ec2:DescribeInternetGateways ec2
ec2:DescribeLaunchTemplateVersions ec2
ec2:DescribeNatGateways ec2
ec2:DescribeRegions ec2
ec2:DescribeReservedInstances ec2
ec2:DescribeReservedInstancesOfferings ec2
ec2:DescribeRouteTables ec2
ec2:DescribeSecurityGroups ec2
ec2:DescribeSnapshots ec2
ec2:DescribeSubnets ec2
ec2:DescribeVolumes ec2
ec2:DescribeVpcEndpoints ec2
ec2:DescribeVpcs ec2
ec2:DescribeVpnConnections ec2
ec2:DescribeVpnGateways ec2
ec2:GetManagedPrefixListEntries ec2
ecs:DescribeTaskDefinition ecs
ecs:ListTaskDefinitions ecs
elasticloadbalancing:DescribeAccountLimits elasticloadbalancing
elasticloadbalancing:DescribeInstanceHealth elasticloadbalancing
elasticloadbalancing:DescribeListeners elasticloadbalancing
elasticloadbalancing:DescribeLoadBalancerAttributes elasticloadbalancing
elasticloadbalancing:DescribeLoadBalancerPolicies elasticloadbalancing
elasticloadbalancing:DescribeLoadBalancerPolicyTypes elasticloadbalancing
elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing
elasticloadbalancing:DescribeRules elasticloadbalancing
elasticloadbalancing:DescribeTargetGroups elasticloadbalancing
elasticloadbalancing:DescribeTargetHealth elasticloadbalancing
iam:GenerateCredentialReport iam
iam:GetAccountPasswordPolicy iam
iam:GetAccountSummary iam
iam:GetCredentialReport iam
iam:GetServerCertificate iam
iam:ListSAMLProviders iam
iam:ListServerCertificates iam
kafka:DescribeClusterV2 kafka
kafka:ListClustersV2 kafka
kafka:ListNodes kafka
kinesis:DescribeLimits kinesis
network-firewall:DescribeFirewall network-firewall
network-firewall:ListFirewalls network-firewall
outposts:GetOutpost outposts
outposts:ListAssets outposts
outposts:ListOutposts outposts
rds:DescribeAccountAttributes rds
rds:DescribeDBClusters rds
rds:DescribeDBEngineVersions rds
rds:DescribeDBInstances rds
rds:DescribeDBParameterGroups rds
rds:DescribeDBParameters rds
rds:DescribeDBSecurityGroups rds
rds:DescribeDBSnapshots rds
rds:DescribeDBSubnetGroups rds
rds:DescribeEngineDefaultParameters rds
rds:DescribeEvents rds
rds:DescribeOptionGroupOptions rds
rds:DescribeOptionGroups rds
rds:DescribeOrderableDBInstanceOptions rds
rds:DescribeReservedDBInstances rds
rds:DescribeReservedDBInstancesOfferings rds
rds:ListTagsForResource rds
redshift:DescribeClusters redshift
redshift:DescribeReservedNodeOfferings redshift
redshift:DescribeReservedNodes redshift
route53:GetAccountLimit route53
route53:GetHealthCheck route53
route53:GetHostedZone route53
route53:ListHealthChecks route53
route53:ListHostedZones route53
route53:ListHostedZonesByName route53
route53:ListResourceRecordSets route53
route53resolver:ListResolverEndpointIpAddresses route53resolver
route53resolver:ListResolverEndpoints route53resolver
s3:GetAccountPublicAccessBlock s3
s3:GetBucketAcl s3
s3:GetBucketLocation s3
s3:GetBucketLogging s3
s3:GetBucketPolicy s3
s3:GetBucketPolicyStatus s3
s3:GetBucketPublicAccessBlock s3
s3:GetBucketVersioning s3
s3:GetLifecycleConfiguration s3
s3:ListAllMyBuckets s3
s3:ListBucket s3
ses:GetSendQuota ses
sqs:GetQueueAttributes sqs
sqs:ListQueues sqs