Skip to content

Policy: SupportUser

ARN: arn:aws:iam::aws:policy/job-function/SupportUser

Allowed Actions

Actions Services
acm:DescribeCertificate acm
acm:GetCertificate acm
acm:List* acm
acm-pca:DescribeCertificateAuthority acm-pca
acm-pca:ListCertificateAuthorities acm-pca
apigateway:GET apigateway
autoscaling:Describe* autoscaling
aws-marketplace:ViewSubscriptions aws-marketplace
cloudformation:Describe* cloudformation
cloudformation:EstimateTemplateCost cloudformation
cloudformation:Get* cloudformation
cloudformation:List* cloudformation
cloudfront:Get* cloudfront
cloudfront:List* cloudfront
cloudsearch:Describe* cloudsearch
cloudsearch:List* cloudsearch
cloudtrail:DescribeTrails cloudtrail
cloudtrail:GetTrailStatus cloudtrail
cloudtrail:ListPublicKeys cloudtrail
cloudtrail:ListTags cloudtrail
cloudtrail:LookupEvents cloudtrail
cloudwatch:Describe* cloudwatch
cloudwatch:Get* cloudwatch
cloudwatch:List* cloudwatch
codecommit:BatchGetRepositories codecommit
codecommit:Get* codecommit
codecommit:List* codecommit
codedeploy:Batch* codedeploy
codedeploy:Get* codedeploy
codedeploy:List* codedeploy
codepipeline:AcknowledgeJob codepipeline
codepipeline:AcknowledgeThirdPartyJob codepipeline
codepipeline:GetPipeline codepipeline
codepipeline:GetPipelineState codepipeline
codepipeline:ListActionTypes codepipeline
codepipeline:ListPipelines codepipeline
codepipeline:PollForJobs codepipeline
codepipeline:PollForThirdPartyJobs codepipeline
cognito-identity:Describe* cognito-identity
cognito-identity:List* cognito-identity
cognito-identity:LookupDeveloperIdentity cognito-identity
cognito-idp:DescribeResourceServer cognito-idp
cognito-idp:DescribeRiskConfiguration cognito-idp
cognito-idp:DescribeUserImportJob cognito-idp
cognito-idp:DescribeUserPool cognito-idp
cognito-idp:DescribeUserPoolDomain cognito-idp
cognito-idp:List* cognito-idp
cognito-sync:Describe* cognito-sync
cognito-sync:GetBulkPublishDetails cognito-sync
cognito-sync:GetCognitoEvents cognito-sync
cognito-sync:GetIdentityPoolConfiguration cognito-sync
cognito-sync:List* cognito-sync
config:DescribeConfigRuleEvaluationStatus config
config:DescribeConfigRules config
config:DescribeConfigurationRecorderStatus config
config:DescribeConfigurationRecorders config
config:DescribeDeliveryChannelStatus config
config:DescribeDeliveryChannels config
config:GetResourceConfigHistory config
config:ListDiscoveredResources config
datapipeline:DescribeObjects datapipeline
datapipeline:DescribePipelines datapipeline
datapipeline:GetPipelineDefinition datapipeline
datapipeline:ListPipelines datapipeline
datapipeline:QueryObjects datapipeline
datapipeline:ReportTaskProgress datapipeline
datapipeline:ReportTaskRunnerHeartbeat datapipeline
devicefarm:Get* devicefarm
devicefarm:List* devicefarm
directconnect:Describe* directconnect
discovery:Describe* discovery
discovery:ListConfigurations discovery
dms:Describe* dms
dms:List* dms
ds:DescribeDirectories ds
ds:DescribeSnapshots ds
ds:GetDirectoryLimits ds
ds:GetSnapshotLimits ds
ds:ListAuthorizedApplications ds
dynamodb:DescribeLimits dynamodb
dynamodb:DescribeTable dynamodb
dynamodb:ListTables dynamodb
ec2:Describe* ec2
ec2:DescribeHosts ec2
ec2:DescribeIdFormat ec2
ec2:DescribeInstanceAttribute ec2
ec2:DescribeNatGateways ec2
ec2:DescribeReservedInstancesModifications ec2
ec2:DescribeTags ec2
ec2:SearchLocalGatewayRoutes ec2
ec2:describeIdentityIdFormat ec2
ecr:BatchCheckLayerAvailability ecr
ecr:DescribeRepositories ecr
ecr:GetRepositoryPolicy ecr
ecr:ListImages ecr
ecs:Describe* ecs
ecs:List* ecs
elasticache:Describe* elasticache
elasticache:List* elasticache
elasticbeanstalk:Check* elasticbeanstalk
elasticbeanstalk:Describe* elasticbeanstalk
elasticbeanstalk:List* elasticbeanstalk
elasticbeanstalk:RequestEnvironmentInfo elasticbeanstalk
elasticbeanstalk:RetrieveEnvironmentInfo elasticbeanstalk
elasticbeanstalk:ValidateConfigurationSettings elasticbeanstalk
elasticfilesystem:Describe* elasticfilesystem
elasticfilesystem:DescribeFileSystems elasticfilesystem
elasticloadbalancing:Describe* elasticloadbalancing
elasticmapreduce:Describe* elasticmapreduce
elasticmapreduce:List* elasticmapreduce
elastictranscoder:List* elastictranscoder
elastictranscoder:ReadJob elastictranscoder
es:Describe* es
es:ESHttpGet es
es:ESHttpHead es
es:List* es
events:DescribeRule events
events:List* events
events:TestEventPattern events
firehose:Describe* firehose
firehose:List* firehose
gamelift:Describe* gamelift
gamelift:List* gamelift
glacier:DescribeJob glacier
glacier:DescribeVault glacier
glacier:Get* glacier
glacier:List* glacier
glacier:ListVaults glacier
iam:GenerateCredentialReport iam
iam:GenerateServiceLastAccessedDetails iam
iam:Get* iam
iam:List* iam
importexport:GetStatus importexport
importexport:ListJobs importexport
inspector:Describe* inspector
inspector:List* inspector
iot:Describe* iot
iot:Get* iot
iot:List* iot
kinesis:Describe* kinesis
kinesis:Get* kinesis
kinesis:List* kinesis
kinesisanalytics:DescribeApplication kinesisanalytics
kinesisanalytics:DiscoverInputSchema kinesisanalytics
kinesisanalytics:GetApplicationState kinesisanalytics
kinesisanalytics:ListApplications kinesisanalytics
kms:Describe* kms
kms:Get* kms
kms:List* kms
lambda:Get* lambda
lambda:List* lambda
logs:Describe* logs
logs:TestMetricFilter logs
machinelearning:Describe* machinelearning
machinelearning:Get* machinelearning
opsworks:Describe* opsworks
rds:Describe* rds
rds:ListTagsForResource rds
redshift:Describe* redshift
route53:Get* route53
route53:List* route53
route53domains:CheckDomainAvailability route53domains
route53domains:GetDomainDetail route53domains
route53domains:GetOperationDetail route53domains
route53domains:List* route53domains
s3:List* s3
sdb:GetAttributes sdb
sdb:List* sdb
sdb:Select* sdb
servicecatalog:DescribeProduct servicecatalog
servicecatalog:DescribeProductView servicecatalog
servicecatalog:DescribeProvisioningParameters servicecatalog
servicecatalog:DescribeRecord servicecatalog
servicecatalog:ListLaunchPaths servicecatalog
servicecatalog:ListRecordHistory servicecatalog
servicecatalog:ScanProvisionedProducts servicecatalog
servicecatalog:SearchProducts servicecatalog
ses:Get* ses
ses:List* ses
sns:Get* sns
sns:List* sns
sqs:GetQueueAttributes sqs
sqs:GetQueueUrl sqs
sqs:ListQueues sqs
sqs:ReceiveMessage sqs
ssm:Describe* ssm
ssm:List* ssm
storagegateway:Describe* storagegateway
storagegateway:List* storagegateway
support:* support
swf:Count* swf
swf:Describe* swf
swf:Get* swf
swf:List* swf
waf:Get* waf
waf:List* waf
workdocs:Describe* workdocs
workmail:Describe* workmail
workmail:Get* workmail
workspaces:Describe* workspaces