Skip to content

Service: cloudfront

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/CloudFrontFullAccess CloudFrontFullAccess
arn:aws:iam::aws:policy/CloudFrontReadOnlyAccess CloudFrontReadOnlyAccess
arn:aws:iam::aws:policy/AmazonRoute53FullAccess AmazonRoute53FullAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser SupportUser
arn:aws:iam::aws:policy/job-function/NetworkAdministrator NetworkAdministrator
arn:aws:iam::aws:policy/aws-service-role/AWSLambdaReplicator AWSLambdaReplicator
arn:aws:iam::aws:policy/aws-service-role/AWSTrustedAdvisorServiceRolePolicy AWSTrustedAdvisorServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/FMSServiceRolePolicy FMSServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSShieldDRTAccessPolicy AWSShieldDRTAccessPolicy
arn:aws:iam::aws:policy/CloudWatchAutomaticDashboardsAccess CloudWatchAutomaticDashboardsAccess
arn:aws:iam::aws:policy/AWSForWordPressPluginPolicy AWSForWordPressPluginPolicy
arn:aws:iam::aws:policy/AWSWAFConsoleFullAccess AWSWAFConsoleFullAccess
arn:aws:iam::aws:policy/AWSWAFConsoleReadOnlyAccess AWSWAFConsoleReadOnlyAccess
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/AdministratorAccess-Amplify AdministratorAccess-Amplify
arn:aws:iam::aws:policy/aws-service-role/AWSAuditManagerServiceRolePolicy AWSAuditManagerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSShieldServiceRolePolicy AWSShieldServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy AWSResourceExplorerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/CloudWatchInternetMonitorServiceRolePolicy CloudWatchInternetMonitorServiceRolePolicy
arn:aws:iam::aws:policy/ResourceGroupsTaggingAPITagUntagSupportedResources ResourceGroupsTaggingAPITagUntagSupportedResources
arn:aws:iam::aws:policy/CloudWatchInternetMonitorFullAccess CloudWatchInternetMonitorFullAccess
arn:aws:iam::aws:policy/AWSPartnerLedSupportReadOnlyAccess AWSPartnerLedSupportReadOnlyAccess
arn:aws:iam::aws:policy/AIOpsAssistantPolicy AIOpsAssistantPolicy

Allowed Actions

Action Service
cloudfront:* cloudfront
cloudfront:CreateCloudFrontOriginAccessIdentity cloudfront
cloudfront:CreateDistribution cloudfront
cloudfront:CreateInvalidation cloudfront
cloudfront:DeleteCloudFrontOriginAccessIdentity cloudfront
cloudfront:DeleteDistribution cloudfront
cloudfront:Describe* cloudfront
cloudfront:Get* cloudfront
cloudfront:GetCachePolicy cloudfront
cloudfront:GetCloudFrontOriginAccessIdentity cloudfront
cloudfront:GetCloudFrontOriginAccessIdentityConfig cloudfront
cloudfront:GetContinuousDeploymentPolicy cloudfront
cloudfront:GetDistribution cloudfront
cloudfront:GetDistribution* cloudfront
cloudfront:GetDistributionConfig cloudfront
cloudfront:GetFunction cloudfront
cloudfront:GetInvalidation cloudfront
cloudfront:GetKeyGroup cloudfront
cloudfront:GetMonitoringSubscription cloudfront
cloudfront:GetOriginAccessControl cloudfront
cloudfront:GetOriginRequestPolicy cloudfront
cloudfront:GetPublicKey cloudfront
cloudfront:GetRealtimeLogConfig cloudfront
cloudfront:GetResponseHeadersPolicy cloudfront
cloudfront:List* cloudfront
cloudfront:ListCachePolicies cloudfront
cloudfront:ListCloudFrontOriginAccessIdentities cloudfront
cloudfront:ListContinuousDeploymentPolicies cloudfront
cloudfront:ListDistributions cloudfront
cloudfront:ListDistributionsByLambdaFunction cloudfront
cloudfront:ListDistributionsByWebACLId cloudfront
cloudfront:ListFieldLevelEncryptionConfigs cloudfront
cloudfront:ListFieldLevelEncryptionProfiles cloudfront
cloudfront:ListFunctions cloudfront
cloudfront:ListInvalidations cloudfront
cloudfront:ListOriginAccessControls cloudfront
cloudfront:ListOriginRequestPolicies cloudfront
cloudfront:ListPublicKeys cloudfront
cloudfront:ListRealtimeLogConfigs cloudfront
cloudfront:ListResponseHeadersPolicies cloudfront
cloudfront:ListStreamingDistributions cloudfront
cloudfront:ListTagsForResource cloudfront
cloudfront:TagResource cloudfront
cloudfront:UntagResource cloudfront
cloudfront:UpdateCloudFrontOriginAccessIdentity cloudfront
cloudfront:UpdateDistribution cloudfront
cloudfront:describeFunction cloudfront
cloudfront:getCachePolicy cloudfront
cloudfront:getCachePolicyConfig cloudfront
cloudfront:getCloudFrontOriginAccessIdentity cloudfront
cloudfront:getCloudFrontOriginAccessIdentityConfig cloudfront
cloudfront:getContinuousDeploymentPolicy cloudfront
cloudfront:getContinuousDeploymentPolicyConfig cloudfront
cloudfront:getDistribution cloudfront
cloudfront:getDistributionConfig cloudfront
cloudfront:getInvalidation cloudfront
cloudfront:getKeyGroup cloudfront
cloudfront:getKeyGroupConfig cloudfront
cloudfront:getMonitoringSubscription cloudfront
cloudfront:getOriginAccessControl cloudfront
cloudfront:getOriginAccessControlConfig cloudfront
cloudfront:getOriginRequestPolicy cloudfront
cloudfront:getOriginRequestPolicyConfig cloudfront
cloudfront:getPublicKey cloudfront
cloudfront:getPublicKeyConfig cloudfront
cloudfront:getRealtimeLogConfig cloudfront
cloudfront:getResponseHeadersPolicy cloudfront
cloudfront:getResponseHeadersPolicyConfig cloudfront
cloudfront:getStreamingDistribution cloudfront
cloudfront:getStreamingDistributionConfig cloudfront
cloudfront:listCachePolicies cloudfront
cloudfront:listCloudFrontOriginAccessIdentities cloudfront
cloudfront:listContinuousDeploymentPolicies cloudfront
cloudfront:listDistributions cloudfront
cloudfront:listDistributionsByCachePolicyId cloudfront
cloudfront:listDistributionsByKeyGroup cloudfront
cloudfront:listDistributionsByOriginRequestPolicyId cloudfront
cloudfront:listDistributionsByRealtimeLogConfig cloudfront
cloudfront:listDistributionsByResponseHeadersPolicyId cloudfront
cloudfront:listDistributionsByWebACLId cloudfront
cloudfront:listFunctions cloudfront
cloudfront:listInvalidations cloudfront
cloudfront:listKeyGroups cloudfront
cloudfront:listOriginAccessControls cloudfront
cloudfront:listOriginRequestPolicies cloudfront
cloudfront:listPublicKeys cloudfront
cloudfront:listRealtimeLogConfigs cloudfront
cloudfront:listResponseHeadersPolicies cloudfront
cloudfront:listStreamingDistributions cloudfront