Service: ds

Attached Policies

Policy ARN	Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess	ReadOnlyAccess
arn:aws:iam::aws:policy/AmazonWorkMailFullAccess	AmazonWorkMailFullAccess
arn:aws:iam::aws:policy/SecurityAudit	SecurityAudit
arn:aws:iam::aws:policy/AWSDirectoryServiceFullAccess	AWSDirectoryServiceFullAccess
arn:aws:iam::aws:policy/AWSDirectoryServiceReadOnlyAccess	AWSDirectoryServiceReadOnlyAccess
arn:aws:iam::aws:policy/AmazonZocaloFullAccess	AmazonZocaloFullAccess
arn:aws:iam::aws:policy/AmazonZocaloReadOnlyAccess	AmazonZocaloReadOnlyAccess
arn:aws:iam::aws:policy/AmazonSSMFullAccess	AmazonSSMFullAccess
arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM	AmazonEC2RoleforSSM
arn:aws:iam::aws:policy/service-role/AmazonRDSDirectoryServiceAccess	AmazonRDSDirectoryServiceAccess
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess	ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser	SupportUser
arn:aws:iam::aws:policy/job-function/SystemAdministrator	SystemAdministrator
arn:aws:iam::aws:policy/service-role/AmazonAppStreamServiceAccess	AmazonAppStreamServiceAccess
arn:aws:iam::aws:policy/aws-service-role/AWSSSOServiceRolePolicy	AWSSSOServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy	AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/AWSSSOReadOnly	AWSSSOReadOnly
arn:aws:iam::aws:policy/AWSSSOMasterAccountAdministrator	AWSSSOMasterAccountAdministrator
arn:aws:iam::aws:policy/AWSSSOMemberAccountAdministrator	AWSSSOMemberAccountAdministrator
arn:aws:iam::aws:policy/AmazonConnectReadOnlyAccess	AmazonConnectReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonFSxServiceRolePolicy	AmazonFSxServiceRolePolicy
arn:aws:iam::aws:policy/AmazonFSxFullAccess	AmazonFSxFullAccess
arn:aws:iam::aws:policy/AmazonFSxConsoleReadOnlyAccess	AmazonFSxConsoleReadOnlyAccess
arn:aws:iam::aws:policy/AmazonFSxConsoleFullAccess	AmazonFSxConsoleFullAccess
arn:aws:iam::aws:policy/aws-service-role/ClientVPNServiceRolePolicy	ClientVPNServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSBackupServiceRolePolicyForRestores	AWSBackupServiceRolePolicyForRestores
arn:aws:iam::aws:policy/AmazonSSMDirectoryServiceAccess	AmazonSSMDirectoryServiceAccess
arn:aws:iam::aws:policy/AWSBackupFullAccess	AWSBackupFullAccess
arn:aws:iam::aws:policy/AWSBackupOperatorAccess	AWSBackupOperatorAccess
arn:aws:iam::aws:policy/AmazonWorkDocsReadOnlyAccess	AmazonWorkDocsReadOnlyAccess
arn:aws:iam::aws:policy/AmazonWorkDocsFullAccess	AmazonWorkDocsFullAccess
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole	AWS_ConfigRole
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy	AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/AmazonConnect_FullAccess	AmazonConnect_FullAccess
arn:aws:iam::aws:policy/AmazonMonitronFullAccess	AmazonMonitronFullAccess
arn:aws:iam::aws:policy/AmazonNimbleStudio-LaunchProfileWorker	AmazonNimbleStudio-LaunchProfileWorker
arn:aws:iam::aws:policy/AmazonNimbleStudio-StudioAdmin	AmazonNimbleStudio-StudioAdmin
arn:aws:iam::aws:policy/AmazonNimbleStudio-StudioUser	AmazonNimbleStudio-StudioUser
arn:aws:iam::aws:policy/AWSIdentitySyncFullAccess	AWSIdentitySyncFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerUserSubscriptionsServiceRolePolicy	AWSLicenseManagerUserSubscriptionsServiceRolePolicy
arn:aws:iam::aws:policy/AWSRefactoringToolkitFullAccess	AWSRefactoringToolkitFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy	AWSResourceExplorerServiceRolePolicy
arn:aws:iam::aws:policy/AWSResilienceHubAsssessmentExecutionPolicy	AWSResilienceHubAsssessmentExecutionPolicy
arn:aws:iam::aws:policy/AmazonLaunchWizardFullAccessV2	AmazonLaunchWizardFullAccessV2
arn:aws:iam::aws:policy/AWSDirectoryServiceDataFullAccess	AWSDirectoryServiceDataFullAccess
arn:aws:iam::aws:policy/AWSDirectoryServiceDataReadOnlyAccess	AWSDirectoryServiceDataReadOnlyAccess
arn:aws:iam::aws:policy/AWSPartnerLedSupportReadOnlyAccess	AWSPartnerLedSupportReadOnlyAccess
arn:aws:iam::aws:policy/AIOpsAssistantPolicy	AIOpsAssistantPolicy

Allowed Actions

Action	Service
ds:*	ds
ds:AccessDSData	ds
ds:AddIpRoutes	ds
ds:AuthorizeApplication	ds
ds:Check*	ds
ds:CheckAlias	ds
ds:CreateAlias	ds
ds:CreateComputer	ds
ds:CreateDirectory	ds
ds:CreateIdentityPoolDirectory	ds
ds:CreateMicrosoftAD	ds
ds:DeleteDirectory	ds
ds:Describe*	ds
ds:DescribeDirectories	ds
ds:DescribeDomainControllers	ds
ds:DescribeEventTopics	ds
ds:DescribeSnapshots	ds
ds:DescribeTrusts	ds
ds:Get*	ds
ds:GetAuthorizedApplicationDetails	ds
ds:GetDirectoryLimits	ds
ds:GetSnapshotLimits	ds
ds:List*	ds
ds:ListAuthorizedApplications	ds
ds:ListLogSubscriptions	ds
ds:ListTagsForResource	ds
ds:UnauthorizeApplication	ds
ds:Verify*	ds
ds:describeClientAuthenticationSettings	ds
ds:describeConditionalForwarders	ds
ds:describeDirectories	ds
ds:describeDomainControllers	ds
ds:describeEventTopics	ds
ds:describeLDAPSSettings	ds
ds:describeSharedDirectories	ds
ds:describeSnapshots	ds
ds:describeTrusts	ds
ds:getDirectoryLimits	ds
ds:getSnapshotLimits	ds
ds:listIpRoutes	ds
ds:listSchemaExtensions	ds
ds:listTagsForResource	ds