Skip to content

Service: config

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/AWSConfigUserAccess AWSConfigUserAccess
arn:aws:iam::aws:policy/service-role/AWSConfigRulesExecutionRole AWSConfigRulesExecutionRole
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser SupportUser
arn:aws:iam::aws:policy/job-function/SystemAdministrator SystemAdministrator
arn:aws:iam::aws:policy/service-role/AWSCodeStarServiceRole AWSCodeStarServiceRole
arn:aws:iam::aws:policy/aws-service-role/AmazonSSMServiceRolePolicy AmazonSSMServiceRolePolicy
arn:aws:iam::aws:policy/AWSServiceCatalogAdminFullAccess AWSServiceCatalogAdminFullAccess
arn:aws:iam::aws:policy/AWSServiceCatalogEndUserFullAccess AWSServiceCatalogEndUserFullAccess
arn:aws:iam::aws:policy/aws-service-role/FMSServiceRolePolicy FMSServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSSecurityHubServiceRolePolicy AWSSecurityHubServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSControlTowerServiceRolePolicy AWSControlTowerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSConfigMultiAccountSetupPolicy AWSConfigMultiAccountSetupPolicy
arn:aws:iam::aws:policy/aws-service-role/ConfigConformsServiceRolePolicy ConfigConformsServiceRolePolicy
arn:aws:iam::aws:policy/AWSServiceCatalogEndUserReadOnlyAccess AWSServiceCatalogEndUserReadOnlyAccess
arn:aws:iam::aws:policy/AWSServiceCatalogAdminReadOnlyAccess AWSServiceCatalogAdminReadOnlyAccess
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonDevOpsGuruServiceRolePolicy AmazonDevOpsGuruServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSAuditManagerServiceRolePolicy AWSAuditManagerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRolePolicyForBackupReports AWSServiceRolePolicyForBackupReports
arn:aws:iam::aws:policy/AWSBackupAuditAccess AWSBackupAuditAccess
arn:aws:iam::aws:policy/aws-service-role/AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy
arn:aws:iam::aws:policy/AWSSystemsManagerEnableConfigRecordingExecutionPolicy AWSSystemsManagerEnableConfigRecordingExecutionPolicy
arn:aws:iam::aws:policy/AWSSystemsManagerEnableExplorerExecutionPolicy AWSSystemsManagerEnableExplorerExecutionPolicy
arn:aws:iam::aws:policy/AWSQuickSetupDevOpsGuruPermissionsBoundary AWSQuickSetupDevOpsGuruPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyPermissionsBoundary AWSQuickSetupPatchPolicyPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupSSMHostMgmtPermissionsBoundary AWSQuickSetupSSMHostMgmtPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupDistributorPermissionsBoundary AWSQuickSetupDistributorPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupCFGCPacksPermissionsBoundary AWSQuickSetupCFGCPacksPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupSchedulerPermissionsBoundary AWSQuickSetupSchedulerPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupDeploymentRolePolicy AWSQuickSetupDeploymentRolePolicy
arn:aws:iam::aws:policy/ResourceGroupsTaggingAPITagUntagSupportedResources ResourceGroupsTaggingAPITagUntagSupportedResources
arn:aws:iam::aws:policy/aws-service-role/AWSObservabilityAdminServiceRolePolicy AWSObservabilityAdminServiceRolePolicy
arn:aws:iam::aws:policy/AIOpsAssistantPolicy AIOpsAssistantPolicy

Allowed Actions

Action Service
config:* config
config:BatchGet* config
config:BatchGetAggregateResourceConfig config
config:BatchGetResourceConfig config
config:DeleteConfigRule config
config:DeleteConfigurationAggregator config
config:DeleteConformancePack config
config:DeleteEvaluationResults config
config:DeleteRemediationConfiguration config
config:DeleteServiceLinkedConfigurationRecorder config
config:Deliver* config
config:Describe* config
config:DescribeAggregationAuthorizations config
config:DescribeComplianceByConfigRule config
config:DescribeComplianceByResource config
config:DescribeConfigRuleEvaluationStatus config
config:DescribeConfigRules config
config:DescribeConfigurationAggregators config
config:DescribeConfigurationRecorderStatus config
config:DescribeConfigurationRecorders config
config:DescribeConformancePackStatus config
config:DescribeConformancePacks config
config:DescribeDeliveryChannelStatus config
config:DescribeDeliveryChannels config
config:DescribeRemediationConfigurations config
config:Get* config
config:GetComplianceDetailsByConfigRule config
config:GetComplianceSummaryByConfigRule config
config:GetDiscoveredResourceCounts config
config:GetResourceConfigHistory config
config:GetStoredQuery config
config:List* config
config:ListDiscoveredResources config
config:Put* config
config:PutAggregationAuthorization config
config:PutConfigRule config
config:PutConfigurationAggregator config
config:PutConfigurationRecorder config
config:PutConformancePack config
config:PutDeliveryChannel config
config:PutEvaluations config
config:PutRemediationConfigurations config
config:PutServiceLinkedConfigurationRecorder config
config:Select* config
config:SelectAggregateResourceConfig config
config:SelectResourceConfig config
config:StartConfigRulesEvaluation config
config:StartConfigurationRecorder config
config:TagResource config
config:UntagResource config
config:batchGetAggregateResourceConfig config
config:batchGetResourceConfig config
config:describeAggregateComplianceByConfigRules config
config:describeAggregationAuthorizations config
config:describeComplianceByConfigRule config
config:describeComplianceByResource config
config:describeConfigRuleEvaluationStatus config
config:describeConfigRules config
config:describeConfigurationAggregatorSourcesStatus config
config:describeConfigurationAggregators config
config:describeConfigurationRecorderStatus config
config:describeConfigurationRecorders config
config:describeConformancePackCompliance config
config:describeConformancePackStatus config
config:describeConformancePacks config
config:describeDeliveryChannelStatus config
config:describeDeliveryChannels config
config:describeOrganizationConfigRuleStatuses config
config:describeOrganizationConfigRules config
config:describeOrganizationConformancePackStatuses config
config:describeOrganizationConformancePacks config
config:describePendingAggregationRequests config
config:describeRemediationConfigurations config
config:describeRemediationExceptions config
config:describeRemediationExecutionStatus config
config:describeRetentionConfigurations config
config:getAggregateComplianceDetailsByConfigRule config
config:getAggregateConfigRuleComplianceSummary config
config:getAggregateDiscoveredResourceCounts config
config:getAggregateResourceConfig config
config:getComplianceDetailsByConfigRule config
config:getComplianceDetailsByResource config
config:getComplianceSummaryByConfigRule config
config:getComplianceSummaryByResourceType config
config:getConformancePackComplianceDetails config
config:getConformancePackComplianceSummary config
config:getDiscoveredResourceCounts config
config:getOrganizationConfigRuleDetailedStatus config
config:getOrganizationConformancePackDetailedStatus config
config:getResourceConfigHistory config
config:listAggregateDiscoveredResources config
config:listDiscoveredResources config
config:listTagsForResource config