Skip to content

Policy: ViewOnlyAccess

ARN: arn:aws:iam::aws:policy/job-function/ViewOnlyAccess

Allowed Actions

Actions Services
acm:ListCertificates acm
aiops:GetInvestigation aiops
aiops:GetInvestigationGroup aiops
aiops:ListInvestigationEvents aiops
aiops:ListInvestigationGroups aiops
aiops:ListInvestigations aiops
apigateway:GET apigateway
athena:List* athena
autoscaling:Describe* autoscaling
aws-marketplace:ViewSubscriptions aws-marketplace
backup:DescribeBackupJob backup
backup:DescribeBackupVault backup
backup:DescribeCopyJob backup
backup:DescribeFramework backup
backup:DescribeGlobalSettings backup
backup:DescribeProtectedResource backup
backup:DescribeRecoveryPoint backup
backup:DescribeRegionSettings backup
backup:DescribeReportJob backup
backup:DescribeReportPlan backup
backup:DescribeRestoreJob backup
backup:GetSupportedResourceTypes backup
backup:ListBackupJobs backup
backup:ListBackupPlanTemplates backup
backup:ListBackupPlanVersions backup
backup:ListBackupPlans backup
backup:ListBackupSelections backup
backup:ListBackupVaults backup
backup:ListCopyJobs backup
backup:ListFrameworks backup
backup:ListLegalHolds backup
backup:ListProtectedResources backup
backup:ListProtectedResourcesByBackupVault backup
backup:ListRecoveryPointsByBackupVault backup
backup:ListRecoveryPointsByLegalHold backup
backup:ListRecoveryPointsByResource backup
backup:ListReportJobs backup
backup:ListReportPlans backup
backup:ListRestoreJobs backup
backup:ListTags backup
batch:ListJobs batch
bedrock:ListCustomModels bedrock
bedrock:ListTagsForResource bedrock
clouddirectory:ListAppliedSchemaArns clouddirectory
clouddirectory:ListDevelopmentSchemaArns clouddirectory
clouddirectory:ListDirectories clouddirectory
clouddirectory:ListPublishedSchemaArns clouddirectory
cloudformation:DescribeStacks cloudformation
cloudformation:List* cloudformation
cloudfront:List* cloudfront
cloudsearch:DescribeDomains cloudsearch
cloudsearch:List* cloudsearch
cloudtrail:DescribeTrails cloudtrail
cloudtrail:ListTrails cloudtrail
cloudtrail:LookupEvents cloudtrail
cloudwatch:Get* cloudwatch
cloudwatch:List* cloudwatch
codebuild:ListBuilds* codebuild
codebuild:ListProjects codebuild
codecommit:List* codecommit
codedeploy:BatchGetApplicationRevisions codedeploy
codedeploy:BatchGetApplications codedeploy
codedeploy:BatchGetDeploymentGroups codedeploy
codedeploy:BatchGetDeploymentInstances codedeploy
codedeploy:BatchGetDeploymentTargets codedeploy
codedeploy:BatchGetDeployments codedeploy
codedeploy:BatchGetOnPremisesInstances codedeploy
codedeploy:Get* codedeploy
codedeploy:List* codedeploy
codepipeline:ListPipelines codepipeline
codestar:List* codestar
cognito-identity:ListIdentities cognito-identity
cognito-identity:ListIdentityPools cognito-identity
cognito-idp:List* cognito-idp
cognito-sync:ListDatasets cognito-sync
comprehend:Describe* comprehend
comprehend:List* comprehend
config:Describe* config
config:List* config
connect:List* connect
cost-optimization-hub:GetPreferences cost-optimization-hub
cost-optimization-hub:GetRecommendation cost-optimization-hub
cost-optimization-hub:ListEnrollmentStatuses cost-optimization-hub
cost-optimization-hub:ListRecommendationSummaries cost-optimization-hub
cost-optimization-hub:ListRecommendations cost-optimization-hub
databrew:ListJobs databrew
databrew:ListProjects databrew
datapipeline:DescribePipelines datapipeline
datapipeline:GetAccountLimits datapipeline
datapipeline:ListPipelines datapipeline
dax:DescribeClusters dax
dax:DescribeDefaultParameters dax
dax:DescribeEvents dax
dax:DescribeParameterGroups dax
dax:DescribeParameters dax
dax:DescribeSubnetGroups dax
dax:ListTags dax
devicefarm:List* devicefarm
directconnect:Describe* directconnect
discovery:List* discovery
dms:List* dms
ds:DescribeDirectories ds
dynamodb:DescribeBackup dynamodb
dynamodb:DescribeContinuousBackups dynamodb
dynamodb:DescribeGlobalTable dynamodb
dynamodb:DescribeGlobalTableSettings dynamodb
dynamodb:DescribeLimits dynamodb
dynamodb:DescribeReservedCapacity dynamodb
dynamodb:DescribeReservedCapacityOfferings dynamodb
dynamodb:DescribeStream dynamodb
dynamodb:DescribeTable dynamodb
dynamodb:DescribeTimeToLive dynamodb
dynamodb:ListBackups dynamodb
dynamodb:ListExports dynamodb
dynamodb:ListGlobalTables dynamodb
dynamodb:ListStreams dynamodb
dynamodb:ListTables dynamodb
dynamodb:ListTagsOfResource dynamodb
ec2:DescribeAccountAttributes ec2
ec2:DescribeAddresses ec2
ec2:DescribeAvailabilityZones ec2
ec2:DescribeBundleTasks ec2
ec2:DescribeCarrierGateways ec2
ec2:DescribeClassicLinkInstances ec2
ec2:DescribeConversionTasks ec2
ec2:DescribeCustomerGateways ec2
ec2:DescribeDhcpOptions ec2
ec2:DescribeExportTasks ec2
ec2:DescribeFlowLogs ec2
ec2:DescribeHost* ec2
ec2:DescribeIdFormat ec2
ec2:DescribeIdentityIdFormat ec2
ec2:DescribeImage* ec2
ec2:DescribeImport* ec2
ec2:DescribeInstance* ec2
ec2:DescribeInternetGateways ec2
ec2:DescribeKeyPairs ec2
ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations ec2
ec2:DescribeLocalGatewayRouteTableVpcAssociations ec2
ec2:DescribeLocalGatewayRouteTables ec2
ec2:DescribeLocalGatewayVirtualInterfaceGroups ec2
ec2:DescribeLocalGatewayVirtualInterfaces ec2
ec2:DescribeLocalGateways ec2
ec2:DescribeMovingAddresses ec2
ec2:DescribeNatGateways ec2
ec2:DescribeNetwork* ec2
ec2:DescribePlacementGroups ec2
ec2:DescribePrefixLists ec2
ec2:DescribeRegions ec2
ec2:DescribeReserved* ec2
ec2:DescribeRouteTables ec2
ec2:DescribeSecurityGroupRules ec2
ec2:DescribeSecurityGroups ec2
ec2:DescribeSnapshot* ec2
ec2:DescribeSpot* ec2
ec2:DescribeSubnets ec2
ec2:DescribeTags ec2
ec2:DescribeVolume* ec2
ec2:DescribeVpc* ec2
ec2:DescribeVpnGateways ec2
ec2:SearchLocalGatewayRoutes ec2
ecr:DescribeRegistry ecr
ecr:DescribeRepositories ecr
ecr:ListImages ecr
ecs:Describe* ecs
ecs:List* ecs
eks:ListTagsForResource eks
elastic-inference:DescribeAcceleratorOfferings elastic-inference
elastic-inference:DescribeAcceleratorTypes elastic-inference
elastic-inference:DescribeAccelerators elastic-inference
elastic-inference:ListTagsForResource elastic-inference
elasticache:Describe* elasticache
elasticbeanstalk:DescribeApplicationVersions elasticbeanstalk
elasticbeanstalk:DescribeApplications elasticbeanstalk
elasticbeanstalk:DescribeEnvironments elasticbeanstalk
elasticbeanstalk:ListAvailableSolutionStacks elasticbeanstalk
elasticfilesystem:DescribeFileSystems elasticfilesystem
elasticloadbalancing:DescribeInstanceHealth elasticloadbalancing
elasticloadbalancing:DescribeListeners elasticloadbalancing
elasticloadbalancing:DescribeLoadBalancerAttributes elasticloadbalancing
elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing
elasticloadbalancing:DescribeTargetGroups elasticloadbalancing
elasticloadbalancing:DescribeTargetHealth elasticloadbalancing
elasticmapreduce:List* elasticmapreduce
elastictranscoder:List* elastictranscoder
emr-serverless:ListApplications emr-serverless
es:DescribeElasticsearchDomain es
es:DescribeElasticsearchDomains es
es:ListDomainNames es
events:ListRuleNamesByTarget events
events:ListRules events
events:ListTargetsByRule events
firehose:DescribeDeliveryStream firehose
firehose:List* firehose
fsx:DescribeFileSystems fsx
gamelift:List* gamelift
glacier:List* glacier
glue:GetTags glue
greengrass:List* greengrass
iam:GetAccountSummary iam
iam:GetLoginProfile iam
iam:List* iam
importexport:ListJobs importexport
inspector:List* inspector
iot:List* iot
kafka:ListClusters kafka
kendra:ListDataSources kendra
kendra:ListTagsForResource kendra
kinesis:ListStreams kinesis
kinesisanalytics:ListApplications kinesisanalytics
kinesisanalytics:ListTagsForResource kinesisanalytics
kms:ListKeys kms
kms:ListResourceTags kms
lambda:List* lambda
lex:GetBotAliases lex
lex:GetBotChannelAssociations lex
lex:GetBotVersions lex
lex:GetBots lex
lex:GetIntentVersions lex
lex:GetIntents lex
lex:GetSlotTypeVersions lex
lex:GetSlotTypes lex
lex:GetUtterancesView lex
lightsail:GetBlueprints lightsail
lightsail:GetBundles lightsail
lightsail:GetInstanceSnapshots lightsail
lightsail:GetInstances lightsail
lightsail:GetKeyPair lightsail
lightsail:GetRegions lightsail
lightsail:GetStaticIps lightsail
lightsail:IsVpcPeered lightsail
logs:Describe* logs
logs:GetTransformer logs
logs:ListEntitiesForLogGroup logs
logs:ListLogGroupsForEntity logs
logs:ListLogGroupsForQuery logs
logs:ListTagsForResource logs
lookoutvision:ListModelPackagingJobs lookoutvision
lookoutvision:ListModels lookoutvision
lookoutvision:ListProjects lookoutvision
m2:GetApplication m2
m2:GetEnvironment m2
m2:ListApplications m2
m2:ListEnvironments m2
m2:ListTagsForResource m2
machinelearning:Describe* machinelearning
mediaconnect:ListEntitlements mediaconnect
mediaconnect:ListFlows mediaconnect
mediaconnect:ListOfferings mediaconnect
mediaconnect:ListReservations mediaconnect
mobiletargeting:GetApplicationSettings mobiletargeting
mobiletargeting:GetCampaigns mobiletargeting
mobiletargeting:GetImportJobs mobiletargeting
mobiletargeting:GetSegments mobiletargeting
oam:ListAttachedLinks oam
oam:ListLinks oam
oam:ListSinks oam
opsworks:Describe* opsworks
opsworks-cm:Describe* opsworks-cm
organizations:List* organizations
outposts:GetOutpost outposts
outposts:GetOutpostInstanceTypes outposts
outposts:ListOutposts outposts
outposts:ListSites outposts
outposts:ListTagsForResource outposts
polly:Describe* polly
polly:List* polly
profile:ListDomains profile
profile:ListIntegrations profile
rds:Describe* rds
redshift:DescribeClusters redshift
redshift:DescribeEvents redshift
redshift:ViewQueriesInConsole redshift
redshift-serverless:ListTagsForResource redshift-serverless
redshift-serverless:ListWorkgroups redshift-serverless
resource-explorer-2:GetDefaultView resource-explorer-2
resource-explorer-2:GetIndex resource-explorer-2
resource-explorer-2:ListIndexes resource-explorer-2
resource-explorer-2:ListSupportedResourceTypes resource-explorer-2
resource-explorer-2:ListTagsForResource resource-explorer-2
resource-explorer-2:ListViews resource-explorer-2
route53:Get* route53
route53:List* route53
route53domains:List* route53domains
route53resolver:Get* route53resolver
route53resolver:List* route53resolver
s3:ListAllMyBuckets s3
s3:ListBucket s3
s3:ListMultiRegionAccessPoints s3
sagemaker:Describe* sagemaker
sagemaker:List* sagemaker
sdb:List* sdb
servicecatalog:List* servicecatalog
ses:DescribeActiveReceiptRuleSet ses
ses:List* ses
ses:ListDedicatedIpPools ses
shield:List* shield
sns:List* sns
sqs:GetQueueAttributes sqs
sqs:GetQueueUrl sqs
sqs:ListDeadLetterSourceQueues sqs
sqs:ListMessageMoveTasks sqs
sqs:ListQueueTags sqs
sqs:ListQueues sqs
ssm:ListAssociations ssm
ssm:ListDocuments ssm
states:ListActivities states
states:ListStateMachineAliases states
states:ListStateMachineVersions states
states:ListStateMachines states
storagegateway:ListGateways storagegateway
storagegateway:ListLocalDisks storagegateway
storagegateway:ListVolumeRecoveryPoints storagegateway
storagegateway:ListVolumes storagegateway
swf:List* swf
trustedadvisor:Describe* trustedadvisor
waf:List* waf
waf-regional:List* waf-regional
wafv2:List* wafv2
workdocs:DescribeAvailableDirectories workdocs
workdocs:DescribeInstances workdocs
workmail:Describe* workmail
workspaces:Describe* workspaces