Skip to content

Policy: SecurityAudit

ARN: arn:aws:iam::aws:policy/SecurityAudit

Allowed Actions

Actions Services
a4b:ListSkills a4b
access-analyzer:GetAnalyzedResource access-analyzer
access-analyzer:GetAnalyzer access-analyzer
access-analyzer:GetArchiveRule access-analyzer
access-analyzer:GetFinding access-analyzer
access-analyzer:ListAnalyzedResources access-analyzer
access-analyzer:ListAnalyzers access-analyzer
access-analyzer:ListArchiveRules access-analyzer
access-analyzer:ListFindings access-analyzer
access-analyzer:ListTagsForResource access-analyzer
account:GetAlternateContact account
account:GetPrimaryEmail account
account:GetRegionOptStatus account
acm:Describe* acm
acm:List* acm
acm-pca:DescribeCertificateAuthority acm-pca
acm-pca:DescribeCertificateAuthorityAuditReport acm-pca
acm-pca:GetPolicy acm-pca
acm-pca:ListCertificateAuthorities acm-pca
acm-pca:ListPermissions acm-pca
acm-pca:ListTags acm-pca
airflow:GetEnvironment airflow
airflow:ListEnvironments airflow
apigateway:GET apigateway
appflow:ListFlows appflow
appflow:ListTagsForResource appflow
application-autoscaling:Describe* application-autoscaling
appmesh:Describe* appmesh
appmesh:List* appmesh
apprunner:DescribeAutoScalingConfiguration apprunner
apprunner:DescribeCustomDomains apprunner
apprunner:DescribeObservabilityConfiguration apprunner
apprunner:DescribeService apprunner
apprunner:DescribeVpcConnector apprunner
apprunner:DescribeVpcIngressConnection apprunner
apprunner:ListAutoScalingConfigurations apprunner
apprunner:ListConnections apprunner
apprunner:ListObservabilityConfigurations apprunner
apprunner:ListOperations apprunner
apprunner:ListServices apprunner
apprunner:ListTagsForResource apprunner
apprunner:ListVpcConnectors apprunner
apprunner:ListVpcIngressConnections apprunner
appsync:GetApiCache appsync
appsync:List* appsync
athena:GetWorkGroup athena
athena:List* athena
auditmanager:GetAccountStatus auditmanager
auditmanager:ListAssessmentControlInsightsByControlDomain auditmanager
auditmanager:ListAssessmentFrameworkShareRequests auditmanager
auditmanager:ListAssessmentFrameworks auditmanager
auditmanager:ListAssessmentReports auditmanager
auditmanager:ListAssessments auditmanager
auditmanager:ListControlDomainInsights auditmanager
auditmanager:ListControlDomainInsightsByAssessment auditmanager
auditmanager:ListControlInsightsByControlDomain auditmanager
auditmanager:ListControls auditmanager
auditmanager:ListNotifications auditmanager
auditmanager:ListTagsForResource auditmanager
autoscaling:Describe* autoscaling
autoscaling-plans:DescribeScalingPlans autoscaling-plans
backup:DescribeGlobalSettings backup
backup:DescribeRegionSettings backup
backup:GetBackupVaultAccessPolicy backup
backup:GetBackupVaultNotifications backup
backup:ListBackupVaults backup
backup:ListTags backup
batch:DescribeComputeEnvironments batch
batch:DescribeJobDefinitions batch
bedrock:GetCustomModel bedrock
bedrock:GetModelInvocationLoggingConfiguration bedrock
bedrock:ListCustomModels bedrock
bedrock:ListTagsForResource bedrock
braket:SearchJobs braket
braket:SearchQuantumTasks braket
chime:List* chime
cleanrooms:BatchGetCollaborationAnalysisTemplate cleanrooms
cleanrooms:BatchGetSchema cleanrooms
cleanrooms:BatchGetSchemaAnalysisRule cleanrooms
cleanrooms:GetAnalysisTemplate cleanrooms
cleanrooms:GetCollaboration cleanrooms
cleanrooms:GetCollaborationAnalysisTemplate cleanrooms
cleanrooms:GetCollaborationConfiguredAudienceModelAssociation cleanrooms
cleanrooms:GetCollaborationIdNamespaceAssociation cleanrooms
cleanrooms:GetCollaborationPrivacyBudgetTemplate cleanrooms
cleanrooms:GetConfiguredAudienceModelAssociation cleanrooms
cleanrooms:GetConfiguredTable cleanrooms
cleanrooms:GetConfiguredTableAnalysisRule cleanrooms
cleanrooms:GetConfiguredTableAssociation cleanrooms
cleanrooms:GetConfiguredTableAssociationAnalysisRule cleanrooms
cleanrooms:GetIdMappingTable cleanrooms
cleanrooms:GetIdNamespaceAssociation cleanrooms
cleanrooms:GetMembership cleanrooms
cleanrooms:GetPrivacyBudgetTemplate cleanrooms
cleanrooms:GetProtectedQuery cleanrooms
cleanrooms:GetSchema cleanrooms
cleanrooms:GetSchemaAnalysisRule cleanrooms
cleanrooms:ListAnalysisTemplates cleanrooms
cleanrooms:ListCollaborationAnalysisTemplates cleanrooms
cleanrooms:ListCollaborationConfiguredAudienceModelAssociations cleanrooms
cleanrooms:ListCollaborationIdNamespaceAssociations cleanrooms
cleanrooms:ListCollaborationPrivacyBudgetTemplates cleanrooms
cleanrooms:ListCollaborationPrivacyBudgets cleanrooms
cleanrooms:ListCollaborations cleanrooms
cleanrooms:ListConfiguredAudienceModelAssociations cleanrooms
cleanrooms:ListConfiguredTableAssociations cleanrooms
cleanrooms:ListConfiguredTables cleanrooms
cleanrooms:ListIdMappingTables cleanrooms
cleanrooms:ListIdNamespaceAssociations cleanrooms
cleanrooms:ListMembers cleanrooms
cleanrooms:ListMemberships cleanrooms
cleanrooms:ListPrivacyBudgetTemplates cleanrooms
cleanrooms:ListPrivacyBudgets cleanrooms
cleanrooms:ListProtectedQueries cleanrooms
cleanrooms:ListSchemas cleanrooms
cleanrooms:ListTagsForResource cleanrooms
cleanrooms:PreviewPrivacyImpact cleanrooms
cloud9:Describe* cloud9
cloud9:ListEnvironments cloud9
clouddirectory:ListDirectories clouddirectory
cloudformation:DescribeStack* cloudformation
cloudformation:GetStackPolicy cloudformation
cloudformation:GetTemplate cloudformation
cloudformation:ListStack* cloudformation
cloudfront:Get* cloudfront
cloudfront:List* cloudfront
cloudsearch:DescribeDomainEndpointOptions cloudsearch
cloudsearch:DescribeDomains cloudsearch
cloudsearch:DescribeServiceAccessPolicies cloudsearch
cloudtrail:DescribeTrails cloudtrail
cloudtrail:GetEventSelectors cloudtrail
cloudtrail:GetInsightSelectors cloudtrail
cloudtrail:GetTrail cloudtrail
cloudtrail:GetTrailStatus cloudtrail
cloudtrail:ListTags cloudtrail
cloudtrail:ListTrails cloudtrail
cloudtrail:LookupEvents cloudtrail
cloudwatch:Describe* cloudwatch
cloudwatch:GetDashboard cloudwatch
cloudwatch:ListDashboards cloudwatch
cloudwatch:ListTagsForResource cloudwatch
codeartifact:GetDomainPermissionsPolicy codeartifact
codeartifact:GetRepositoryPermissionsPolicy codeartifact
codeartifact:ListRepositories codeartifact
codebuild:BatchGetProjects codebuild
codebuild:GetResourcePolicy codebuild
codebuild:ListProjects codebuild
codebuild:ListSourceCredentials codebuild
codecommit:BatchGetRepositories codecommit
codecommit:GetBranch codecommit
codecommit:GetObjectIdentifier codecommit
codecommit:GetRepository codecommit
codecommit:GetRepositoryTriggers codecommit
codecommit:List* codecommit
codedeploy:Batch* codedeploy
codedeploy:Get* codedeploy
codedeploy:List* codedeploy
codepipeline:GetJobDetails codepipeline
codepipeline:GetPipeline codepipeline
codepipeline:GetPipelineExecution codepipeline
codepipeline:GetPipelineState codepipeline
codepipeline:ListPipelines codepipeline
codestar:Describe* codestar
codestar:List* codestar
cognito-identity:Describe* cognito-identity
cognito-identity:GetIdentityPoolRoles cognito-identity
cognito-identity:ListIdentityPools cognito-identity
cognito-identity:ListTagsForResource cognito-identity
cognito-idp:Describe* cognito-idp
cognito-idp:ListDevices cognito-idp
cognito-idp:ListGroups cognito-idp
cognito-idp:ListIdentityProviders cognito-idp
cognito-idp:ListResourceServers cognito-idp
cognito-idp:ListTagsForResource cognito-idp
cognito-idp:ListUserImportJobs cognito-idp
cognito-idp:ListUserPoolClients cognito-idp
cognito-idp:ListUserPools cognito-idp
cognito-idp:ListUsers cognito-idp
cognito-idp:ListUsersInGroup cognito-idp
cognito-sync:Describe* cognito-sync
cognito-sync:List* cognito-sync
comprehend:Describe* comprehend
comprehend:List* comprehend
comprehendmedical:ListICD10CMInferenceJobs comprehendmedical
comprehendmedical:ListPHIDetectionJobs comprehendmedical
comprehendmedical:ListRxNormInferenceJobs comprehendmedical
comprehendmedical:ListSNOMEDCTInferenceJobs comprehendmedical
config:BatchGetAggregateResourceConfig config
config:BatchGetResourceConfig config
config:Deliver* config
config:Describe* config
config:Get* config
config:List* config
config:SelectAggregateResourceConfig config
config:SelectResourceConfig config
connect:ListApprovedOrigins connect
connect:ListInstanceAttributes connect
connect:ListInstanceStorageConfigs connect
connect:ListInstances connect
connect:ListIntegrationAssociations connect
connect:ListLambdaFunctions connect
connect:ListLexBots connect
connect:ListSecurityKeys connect
databrew:DescribeDataset databrew
databrew:DescribeProject databrew
databrew:ListJobs databrew
databrew:ListProjects databrew
dataexchange:ListDataSets dataexchange
datapipeline:DescribeObjects datapipeline
datapipeline:DescribePipelines datapipeline
datapipeline:EvaluateExpression datapipeline
datapipeline:GetPipelineDefinition datapipeline
datapipeline:ListPipelines datapipeline
datapipeline:QueryObjects datapipeline
datapipeline:ValidatePipelineDefinition datapipeline
datasync:Describe* datasync
datasync:List* datasync
dax:Describe* dax
dax:ListTags dax
deepracer:ListModels deepracer
detective:GetGraphIngestState detective
detective:ListGraphs detective
detective:ListMembers detective
devicefarm:ListProjects devicefarm
directconnect:Describe* directconnect
discovery:DescribeAgents discovery
discovery:DescribeConfigurations discovery
discovery:DescribeContinuousExports discovery
discovery:DescribeExportConfigurations discovery
discovery:DescribeExportTasks discovery
discovery:DescribeImportTasks discovery
dms:Describe* dms
dms:ListTagsForResource dms
docdb-elastic:ListClusters docdb-elastic
ds:DescribeDirectories ds
dynamodb:DescribeContinuousBackups dynamodb
dynamodb:DescribeExport dynamodb
dynamodb:DescribeGlobalTable dynamodb
dynamodb:DescribeKinesisStreamingDestination dynamodb
dynamodb:DescribeTable dynamodb
dynamodb:DescribeTimeToLive dynamodb
dynamodb:ListBackups dynamodb
dynamodb:ListExports dynamodb
dynamodb:ListGlobalTables dynamodb
dynamodb:ListStreams dynamodb
dynamodb:ListTables dynamodb
dynamodb:ListTagsOfResource dynamodb
ec2:Describe* ec2
ec2:GetEbsEncryptionByDefault ec2
ec2:GetImageBlockPublicAccessState ec2
ec2:GetManagedPrefixListAssociations ec2
ec2:GetManagedPrefixListEntries ec2
ec2:GetNetworkInsightsAccessScopeAnalysisFindings ec2
ec2:GetNetworkInsightsAccessScopeContent ec2
ec2:GetTransitGatewayAttachmentPropagations ec2
ec2:GetTransitGatewayMulticastDomainAssociations ec2
ec2:GetTransitGatewayPrefixListReferences ec2
ec2:GetTransitGatewayRouteTableAssociations ec2
ec2:GetTransitGatewayRouteTablePropagations ec2
ec2:SearchTransitGatewayRoutes ec2
ecr:BatchGetRepositoryScanningConfiguration ecr
ecr:DescribeImageScanFindings ecr
ecr:DescribeImages ecr
ecr:DescribeRegistry ecr
ecr:DescribeRepositories ecr
ecr:GetLifecyclePolicy ecr
ecr:GetRegistryPolicy ecr
ecr:GetRegistryScanningConfiguration ecr
ecr:GetRepositoryPolicy ecr
ecr:ListImages ecr
ecr:ListTagsForResource ecr
ecr-public:DescribeImageTags ecr-public
ecr-public:DescribeImages ecr-public
ecr-public:DescribeRegistries ecr-public
ecr-public:DescribeRepositories ecr-public
ecr-public:GetRegistryCatalogData ecr-public
ecr-public:GetRepositoryCatalogData ecr-public
ecr-public:GetRepositoryPolicy ecr-public
ecr-public:ListTagsForResource ecr-public
ecs:Describe* ecs
ecs:List* ecs
eks:DescribeCluster eks
eks:DescribeFargateProfile eks
eks:DescribeNodeGroup eks
eks:ListClusters eks
eks:ListFargateProfiles eks
eks:ListNodeGroups eks
eks:ListTagsForResource eks
eks:ListUpdates eks
elastic-inference:DescribeAccelerators elastic-inference
elasticache:Describe* elasticache
elasticache:ListTagsForResource elasticache
elasticbeanstalk:Describe* elasticbeanstalk
elasticbeanstalk:ListTagsForResource elasticbeanstalk
elasticfilesystem:DescribeAccessPoints elasticfilesystem
elasticfilesystem:DescribeAccountPreferences elasticfilesystem
elasticfilesystem:DescribeBackupPolicy elasticfilesystem
elasticfilesystem:DescribeFileSystemPolicy elasticfilesystem
elasticfilesystem:DescribeFileSystems elasticfilesystem
elasticfilesystem:DescribeLifecycleConfiguration elasticfilesystem
elasticfilesystem:DescribeMountTargetSecurityGroups elasticfilesystem
elasticfilesystem:DescribeMountTargets elasticfilesystem
elasticfilesystem:DescribeReplicationConfigurations elasticfilesystem
elasticfilesystem:DescribeTags elasticfilesystem
elasticloadbalancing:Describe* elasticloadbalancing
elasticmapreduce:Describe* elasticmapreduce
elasticmapreduce:GetAutoTerminationPolicy elasticmapreduce
elasticmapreduce:GetBlockPublicAccessConfiguration elasticmapreduce
elasticmapreduce:GetManagedScalingPolicy elasticmapreduce
elasticmapreduce:ListClusters elasticmapreduce
elasticmapreduce:ListInstances elasticmapreduce
elasticmapreduce:ListSecurityConfigurations elasticmapreduce
elastictranscoder:ListPipelines elastictranscoder
emr-serverless:GetApplication emr-serverless
emr-serverless:ListApplications emr-serverless
emr-serverless:ListJobRuns emr-serverless
entityresolution:GetIdNamespace entityresolution
es:Describe* es
es:GetCompatibleVersions es
es:ListDomainNames es
es:ListElasticsearchInstanceTypeDetails es
es:ListElasticsearchVersions es
es:ListTags es
events:Describe* events
events:List* events
events:TestEventPattern events
finspace:ListEnvironments finspace
finspace:ListKxEnvironments finspace
firehose:Describe* firehose
firehose:List* firehose
fms:ListComplianceStatus fms
fms:ListPolicies fms
forecast:ListDatasets forecast
frauddetector:GetDetectors frauddetector
fsx:Describe* fsx
fsx:List* fsx
gamelift:ListBuilds gamelift
gamelift:ListFleets gamelift
geo:ListMaps geo
glacier:DescribeVault glacier
glacier:GetDataRetrievalPolicy glacier
glacier:GetVaultAccessPolicy glacier
glacier:GetVaultLock glacier
glacier:ListVaults glacier
globalaccelerator:Describe* globalaccelerator
globalaccelerator:List* globalaccelerator
glue:GetCrawlers glue
glue:GetDataCatalogEncryptionSettings glue
glue:GetDatabases glue
glue:GetDevEndpoints glue
glue:GetJobs glue
glue:GetResourcePolicy glue
glue:GetSecurityConfiguration glue
glue:GetSecurityConfigurations glue
glue:GetTags glue
grafana:ListWorkspaces grafana
greengrass:List* greengrass
guardduty:DescribePublishingDestination guardduty
guardduty:Get* guardduty
guardduty:List* guardduty
health:DescribeAffectedAccountsForOrganization health
health:DescribeAffectedEntities health
health:DescribeAffectedEntitiesForOrganization health
health:DescribeEntityAggregates health
health:DescribeEventAggregates health
health:DescribeEventDetails health
health:DescribeEventDetailsForOrganization health
health:DescribeEventTypes health
health:DescribeEvents health
health:DescribeEventsForOrganization health
health:DescribeHealthServiceStatusForOrganization health
healthlake:ListFHIRDatastores healthlake
honeycode:ListTables honeycode
iam:GenerateCredentialReport iam
iam:GenerateServiceLastAccessedDetails iam
iam:Get* iam
iam:List* iam
iam:SimulateCustomPolicy iam
iam:SimulatePrincipalPolicy iam
identitystore:ListGroupMemberships identitystore
identitystore:ListGroupMembershipsForMember identitystore
identitystore:ListGroups identitystore
identitystore:ListUsers identitystore
inspector:Describe* inspector
inspector:Get* inspector
inspector:List* inspector
inspector:Preview* inspector
inspector2:BatchGetAccountStatus inspector2
inspector2:BatchGetFreeTrialInfo inspector2
inspector2:DescribeOrganizationConfiguration inspector2
inspector2:GetConfiguration inspector2
inspector2:GetDelegatedAdminAccount inspector2
inspector2:GetFindingsReportStatus inspector2
inspector2:GetMember inspector2
inspector2:ListAccountPermissions inspector2
inspector2:ListCoverage inspector2
inspector2:ListCoverageStatistics inspector2
inspector2:ListDelegatedAdminAccounts inspector2
inspector2:ListFilters inspector2
inspector2:ListFindingAggregations inspector2
inspector2:ListFindings inspector2
inspector2:ListTagsForResource inspector2
inspector2:ListUsageTotals inspector2
iot:Describe* iot
iot:GetPolicy iot
iot:GetPolicyVersion iot
iot:List* iot
iotanalytics:ListChannels iotanalytics
iotevents:ListInputs iotevents
iotfleetwise:ListModelManifests iotfleetwise
iotsitewise:DescribeGatewayCapabilityConfiguration iotsitewise
iotsitewise:ListAssetModels iotsitewise
iotsitewise:ListGateways iotsitewise
iottwinmaker:ListWorkspaces iottwinmaker
kafka:Describe* kafka
kafka:GetBootstrapBrokers kafka
kafka:GetCompatibleKafkaVersions kafka
kafka:List* kafka
kafka-cluster:Describe* kafka-cluster
kafkaconnect:Describe* kafkaconnect
kafkaconnect:List* kafkaconnect
kendra:DescribeIndex kendra
kendra:ListDataSources kendra
kendra:ListIndices kendra
kendra:ListTagsForResource kendra
kinesis:DescribeLimits kinesis
kinesis:DescribeStream kinesis
kinesis:DescribeStreamConsumer kinesis
kinesis:DescribeStreamSummary kinesis
kinesis:ListShards kinesis
kinesis:ListStreamConsumers kinesis
kinesis:ListStreams kinesis
kinesis:ListTagsForStream kinesis
kinesisanalytics:ListApplications kinesisanalytics
kinesisanalytics:ListTagsForResource kinesisanalytics
kinesisvideo:DescribeEdgeConfiguration kinesisvideo
kinesisvideo:DescribeMappedResourceConfiguration kinesisvideo
kinesisvideo:DescribeMediaStorageConfiguration kinesisvideo
kinesisvideo:DescribeNotificationConfiguration kinesisvideo
kinesisvideo:DescribeSignalingChannel kinesisvideo
kinesisvideo:DescribeStream kinesisvideo
kinesisvideo:ListSignalingChannels kinesisvideo
kinesisvideo:ListStreams kinesisvideo
kinesisvideo:ListTagsForResource kinesisvideo
kinesisvideo:ListTagsForStream kinesisvideo
kms:Describe* kms
kms:Get* kms
kms:List* kms
lambda:GetAccountSettings lambda
lambda:GetFunctionConfiguration lambda
lambda:GetFunctionEventInvokeConfig lambda
lambda:GetLayerVersionPolicy lambda
lambda:GetPolicy lambda
lambda:List* lambda
lex:DescribeBot lex
lex:DescribeResourcePolicy lex
lex:ListBots lex
license-manager:List* license-manager
lightsail:GetBuckets lightsail
lightsail:GetContainerServices lightsail
lightsail:GetDiskSnapshots lightsail
lightsail:GetDisks lightsail
lightsail:GetInstances lightsail
lightsail:GetLoadBalancers lightsail
logs:Describe* logs
logs:GetLogDelivery logs
logs:ListLogDeliveries logs
logs:ListTagsForResource logs
logs:ListTagsLogGroup logs
lookoutequipment:ListDatasets lookoutequipment
lookoutmetrics:ListAnomalyDetectors lookoutmetrics
lookoutvision:ListProjects lookoutvision
m2:GetApplication m2
m2:GetEnvironment m2
m2:ListApplications m2
m2:ListEnvironments m2
m2:ListTagsForResource m2
machinelearning:DescribeMLModels machinelearning
macie2:ListFindings macie2
managedblockchain:ListNetworks managedblockchain
mechanicalturk:ListHITs mechanicalturk
mediaconnect:Describe* mediaconnect
mediaconnect:List* mediaconnect
medialive:ListChannels medialive
mediapackage:DescribeOriginEndpoint mediapackage
mediapackage:ListOriginEndpoints mediapackage
mediapackage-vod:DescribePackagingGroup mediapackage-vod
mediapackage-vod:ListPackagingGroups mediapackage-vod
mediastore:GetContainerPolicy mediastore
mediastore:GetCorsPolicy mediastore
mediastore:ListContainers mediastore
memorydb:DescribeClusters memorydb
mq:DescribeBroker mq
mq:DescribeBrokerEngineTypes mq
mq:DescribeBrokerInstanceOptions mq
mq:DescribeConfiguration mq
mq:DescribeConfigurationRevision mq
mq:DescribeUser mq
mq:ListBrokers mq
mq:ListConfigurationRevisions mq
mq:ListConfigurations mq
mq:ListTags mq
mq:ListUsers mq
network-firewall:DescribeFirewall network-firewall
network-firewall:DescribeFirewallPolicy network-firewall
network-firewall:DescribeLoggingConfiguration network-firewall
network-firewall:DescribeResourcePolicy network-firewall
network-firewall:DescribeRuleGroup network-firewall
network-firewall:ListFirewallPolicies network-firewall
network-firewall:ListFirewalls network-firewall
network-firewall:ListRuleGroups network-firewall
networkmanager:DescribeGlobalNetworks networkmanager
nimble:ListStudios nimble
opsworks:DescribeStacks opsworks
opsworks-cm:DescribeServers opsworks-cm
organizations:Describe* organizations
organizations:List* organizations
pcs:GetCluster pcs
pcs:GetComputeNodeGroup pcs
pcs:GetQueue pcs
pcs:ListClusters pcs
pcs:ListComputeNodeGroups pcs
pcs:ListQueues pcs
pcs:ListTagsForResource pcs
personalize:DescribeDatasetGroup personalize
personalize:ListDatasetGroups personalize
private-networks:ListNetworks private-networks
profile:GetDomain profile
profile:ListDomains profile
profile:ListIntegrations profile
qbusiness:ListApplications qbusiness
qbusiness:ListDataSourceSyncJobs qbusiness
qbusiness:ListDataSources qbusiness
qbusiness:ListDocuments qbusiness
qbusiness:ListGroups qbusiness
qbusiness:ListIndices qbusiness
qbusiness:ListPlugins qbusiness
qbusiness:ListRetrievers qbusiness
qbusiness:ListSubscriptions qbusiness
qbusiness:ListTagsForResource qbusiness
qbusiness:ListWebExperiences qbusiness
qldb:DescribeJournalS3Export qldb
qldb:DescribeLedger qldb
qldb:ListJournalS3Exports qldb
qldb:ListJournalS3ExportsForLedger qldb
qldb:ListLedgers qldb
quicksight:Describe* quicksight
quicksight:List* quicksight
ram:GetResourceShares ram
ram:List* ram
rds:Describe* rds
rds:DownloadDBLogFilePortion rds
rds:ListTagsForResource rds
redshift:Describe* redshift
redshift-serverless:GetNamespace redshift-serverless
redshift-serverless:ListTagsForResource redshift-serverless
redshift-serverless:ListWorkgroups redshift-serverless
rekognition:Describe* rekognition
rekognition:List* rekognition
resource-groups:ListGroupResources resource-groups
robomaker:Describe* robomaker
robomaker:List* robomaker
route53:Get* route53
route53:List* route53
route53domains:GetDomainDetail route53domains
route53domains:GetOperationDetail route53domains
route53domains:ListDomains route53domains
route53domains:ListOperations route53domains
route53domains:ListTagsForDomain route53domains
route53resolver:Get* route53resolver
route53resolver:List* route53resolver
s3:DescribeJob s3
s3:GetAccelerateConfiguration s3
s3:GetAccessGrantsInstanceResourcePolicy s3
s3:GetAccessPoint s3
s3:GetAccessPointConfigurationForObjectLambda s3
s3:GetAccessPointForObjectLambda s3
s3:GetAccessPointPolicy s3
s3:GetAccessPointPolicyForObjectLambda s3
s3:GetAccessPointPolicyStatus s3
s3:GetAccessPointPolicyStatusForObjectLambda s3
s3:GetAccountPublicAccessBlock s3
s3:GetAnalyticsConfiguration s3
s3:GetBucket* s3
s3:GetEncryptionConfiguration s3
s3:GetInventoryConfiguration s3
s3:GetLifecycleConfiguration s3
s3:GetMetricsConfiguration s3
s3:GetMultiRegionAccessPoint s3
s3:GetMultiRegionAccessPointPolicy s3
s3:GetMultiRegionAccessPointPolicyStatus s3
s3:GetObjectAcl s3
s3:GetObjectVersionAcl s3
s3:GetReplicationConfiguration s3
s3:GetStorageLensConfiguration s3
s3:GetStorageLensGroup s3
s3:ListAccessGrants s3
s3:ListAccessGrantsInstances s3
s3:ListAccessPoints s3
s3:ListAccessPointsForObjectLambda s3
s3:ListAllMyBuckets s3
s3:ListCallerAccessGrants s3
s3:ListJobs s3
s3:ListMultiRegionAccessPoints s3
s3:ListStorageLensConfigurations s3
s3:ListStorageLensGroups s3
s3-object-lambda:GetObjectAcl s3-object-lambda
s3-object-lambda:GetObjectVersionAcl s3-object-lambda
s3-outposts:ListEndpoints s3-outposts
s3-outposts:ListOutpostsWithS3 s3-outposts
s3-outposts:ListSharedEndpoints s3-outposts
s3express:GetBucketPolicy s3express
s3express:GetEncryptionConfiguration s3express
s3express:ListAllMyDirectoryBuckets s3express
s3tables:GetNamespace s3tables
s3tables:GetTableBucketMaintenanceConfiguration s3tables
s3tables:GetTableBucketPolicy s3tables
s3tables:GetTableMaintenanceConfiguration s3tables
s3tables:GetTablePolicy s3tables
s3tables:ListNamespaces s3tables
s3tables:ListTableBuckets s3tables
s3tables:ListTables s3tables
sagemaker:Describe* sagemaker
sagemaker:List* sagemaker
schemas:DescribeCodeBinding schemas
schemas:DescribeDiscoverer schemas
schemas:DescribeRegistry schemas
schemas:DescribeSchema schemas
schemas:GetResourcePolicy schemas
schemas:ListDiscoverers schemas
schemas:ListRegistries schemas
schemas:ListSchemaVersions schemas
schemas:ListSchemas schemas
schemas:ListTagsForResource schemas
sdb:DomainMetadata sdb
sdb:ListDomains sdb
secretsmanager:DescribeSecret secretsmanager
secretsmanager:GetResourcePolicy secretsmanager
secretsmanager:ListSecretVersionIds secretsmanager
secretsmanager:ListSecrets secretsmanager
securityhub:BatchGetAutomationRules securityhub
securityhub:BatchGetConfigurationPolicyAssociations securityhub
securityhub:BatchGetControlEvaluations securityhub
securityhub:BatchGetSecurityControls securityhub
securityhub:BatchGetStandardsControlAssociations securityhub
securityhub:Describe* securityhub
securityhub:Get* securityhub
securityhub:List* securityhub
serverlessrepo:GetApplicationPolicy serverlessrepo
serverlessrepo:List* serverlessrepo
servicequotas:GetAWSDefaultServiceQuota servicequotas
servicequotas:GetAssociationForServiceQuotaTemplate servicequotas
servicequotas:GetRequestedServiceQuotaChange servicequotas
servicequotas:GetServiceQuota servicequotas
servicequotas:GetServiceQuotaIncreaseRequestFromTemplate servicequotas
servicequotas:ListAWSDefaultServiceQuotas servicequotas
servicequotas:ListRequestedServiceQuotaChangeHistory servicequotas
servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota servicequotas
servicequotas:ListServiceQuotaIncreaseRequestsInTemplate servicequotas
servicequotas:ListServiceQuotas servicequotas
servicequotas:ListServices servicequotas
servicequotas:ListTagsForResource servicequotas
ses:Describe* ses
ses:GetAccount ses
ses:GetAccountSendingEnabled ses
ses:GetConfigurationSet ses
ses:GetConfigurationSetEventDestinations ses
ses:GetDedicatedIps ses
ses:GetEmailIdentity ses
ses:GetIdentityDkimAttributes ses
ses:GetIdentityPolicies ses
ses:GetIdentityVerificationAttributes ses
ses:ListConfigurationSets ses
ses:ListDedicatedIpPools ses
ses:ListIdentities ses
ses:ListIdentityPolicies ses
ses:ListReceiptFilters ses
ses:ListReceiptRuleSets ses
ses:ListVerifiedEmailAddresses ses
shield:Describe* shield
shield:GetSubscriptionState shield
shield:List* shield
snowball:ListClusters snowball
snowball:ListJobs snowball
sns:GetPlatformApplicationAttributes sns
sns:GetTopicAttributes sns
sns:ListSubscriptions sns
sns:ListSubscriptionsByTopic sns
sns:ListTagsForResource sns
sns:ListTopics sns
sqs:GetQueueAttributes sqs
sqs:ListDeadLetterSourceQueues sqs
sqs:ListQueueTags sqs
sqs:ListQueues sqs
ssm:Describe* ssm
ssm:GetAutomationExecution ssm
ssm:GetServiceSetting ssm
ssm:ListAssociationVersions ssm
ssm:ListAssociations ssm
ssm:ListCommands ssm
ssm:ListComplianceItems ssm
ssm:ListComplianceSummaries ssm
ssm:ListDocumentMetadataHistory ssm
ssm:ListDocumentVersions ssm
ssm:ListDocuments ssm
ssm:ListInventoryEntries ssm
ssm:ListOpsMetadata ssm
ssm:ListResourceComplianceSummaries ssm
ssm:ListResourceDataSync ssm
ssm:ListTagsForResource ssm
sso:DescribeAccountAssignmentCreationStatus sso
sso:DescribePermissionSet sso
sso:DescribePermissionsPolicies sso
sso:List* sso
states:DescribeStateMachine states
states:ListStateMachines states
storagegateway:DescribeBandwidthRateLimit storagegateway
storagegateway:DescribeCache storagegateway
storagegateway:DescribeCachediSCSIVolumes storagegateway
storagegateway:DescribeGatewayInformation storagegateway
storagegateway:DescribeMaintenanceStartTime storagegateway
storagegateway:DescribeNFSFileShares storagegateway
storagegateway:DescribeSnapshotSchedule storagegateway
storagegateway:DescribeStorediSCSIVolumes storagegateway
storagegateway:DescribeTapeArchives storagegateway
storagegateway:DescribeTapeRecoveryPoints storagegateway
storagegateway:DescribeTapes storagegateway
storagegateway:DescribeUploadBuffer storagegateway
storagegateway:DescribeVTLDevices storagegateway
storagegateway:DescribeWorkingStorage storagegateway
storagegateway:List* storagegateway
sts:GetAccessKeyInfo sts
support:DescribeTrustedAdvisorCheckRefreshStatuses support
support:DescribeTrustedAdvisorCheckResult support
support:DescribeTrustedAdvisorCheckSummaries support
support:DescribeTrustedAdvisorChecks support
synthetics:DescribeCanaries synthetics
synthetics:DescribeCanariesLastRun synthetics
synthetics:DescribeRuntimeVersions synthetics
synthetics:GetCanary synthetics
synthetics:GetCanaryRuns synthetics
synthetics:GetGroup synthetics
synthetics:ListAssociatedGroups synthetics
synthetics:ListGroupResources synthetics
synthetics:ListGroups synthetics
synthetics:ListTagsForResource synthetics
tag:GetResources tag
tag:GetTagKeys tag
transcribe:GetCallAnalyticsCategory transcribe
transcribe:GetMedicalVocabulary transcribe
transcribe:GetVocabulary transcribe
transcribe:GetVocabularyFilter transcribe
transcribe:ListCallAnalyticsCategories transcribe
transcribe:ListCallAnalyticsJobs transcribe
transcribe:ListLanguageModels transcribe
transcribe:ListMedicalTranscriptionJobs transcribe
transcribe:ListMedicalVocabularies transcribe
transcribe:ListTagsForResource transcribe
transcribe:ListTranscriptionJobs transcribe
transcribe:ListVocabularies transcribe
transcribe:ListVocabularyFilters transcribe
transfer:Describe* transfer
transfer:List* transfer
translate:List* translate
trustedadvisor:Describe* trustedadvisor
voiceid:DescribeDomain voiceid
waf:GetWebACL waf
waf:ListTagsForResource waf
waf:ListWebACLs waf
waf-regional:GetWebACL waf-regional
waf-regional:ListResourcesForWebACL waf-regional
waf-regional:ListTagsForResource waf-regional
waf-regional:ListWebACLs waf-regional
wafv2:GetLoggingConfiguration wafv2
wafv2:GetWebACL wafv2
wafv2:GetWebACLForResource wafv2
wafv2:ListAvailableManagedRuleGroups wafv2
wafv2:ListIPSets wafv2
wafv2:ListLoggingConfigurations wafv2
wafv2:ListRegexPatternSets wafv2
wafv2:ListResourcesForWebACL wafv2
wafv2:ListRuleGroups wafv2
wafv2:ListTagsForResource wafv2
wafv2:ListWebACLs wafv2
wisdom:GetAssistant wisdom
workdocs:DescribeResourcePermissions workdocs
workspaces:Describe* workspaces
xray:GetEncryptionConfig xray
xray:GetGroup xray
xray:GetGroups xray
xray:GetSamplingRules xray
xray:GetSamplingTargets xray
xray:GetTraceSummaries xray
xray:ListTagsForResource xray