Skip to content

Service: s3

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/CloudFrontFullAccess CloudFrontFullAccess
arn:aws:iam::aws:policy/AmazonDynamoDBFullAccesswithDataPipeline AmazonDynamoDBFullAccesswithDataPipeline
arn:aws:iam::aws:policy/AmazonElastiCacheFullAccess AmazonElastiCacheFullAccess
arn:aws:iam::aws:policy/AmazonElasticMapReduceFullAccess AmazonElasticMapReduceFullAccess
arn:aws:iam::aws:policy/AmazonElasticMapReduceReadOnlyAccess AmazonElasticMapReduceReadOnlyAccess
arn:aws:iam::aws:policy/AWSLambdaExecute AWSLambdaExecute
arn:aws:iam::aws:policy/AmazonRoute53FullAccess AmazonRoute53FullAccess
arn:aws:iam::aws:policy/AmazonS3FullAccess AmazonS3FullAccess
arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess AmazonS3ReadOnlyAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceRole AmazonElasticMapReduceRole
arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceforEC2Role AmazonElasticMapReduceforEC2Role
arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforDataPipelineRole AmazonEC2RoleforDataPipelineRole
arn:aws:iam::aws:policy/service-role/AmazonElasticTranscoderRole AmazonElasticTranscoderRole
arn:aws:iam::aws:policy/AWSConnector AWSConnector
arn:aws:iam::aws:policy/AWSMarketplaceFullAccess AWSMarketplaceFullAccess
arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforAWSCodeDeploy AmazonEC2RoleforAWSCodeDeploy
arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM AmazonEC2RoleforSSM
arn:aws:iam::aws:policy/service-role/VMImportExportRoleForAWSConnector VMImportExportRoleForAWSConnector
arn:aws:iam::aws:policy/AWSWAFFullAccess AWSWAFFullAccess
arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier AWSElasticBeanstalkWebTier
arn:aws:iam::aws:policy/AWSElasticBeanstalkWorkerTier AWSElasticBeanstalkWorkerTier
arn:aws:iam::aws:policy/service-role/AWSConfigRulesExecutionRole AWSConfigRulesExecutionRole
arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkService AWSElasticBeanstalkService
arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role AmazonDMSRedshiftS3Role
arn:aws:iam::aws:policy/AWSAgentlessDiscoveryService AWSAgentlessDiscoveryService
arn:aws:iam::aws:policy/ServerMigrationConnector ServerMigrationConnector
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser SupportUser
arn:aws:iam::aws:policy/job-function/SystemAdministrator SystemAdministrator
arn:aws:iam::aws:policy/job-function/DatabaseAdministrator DatabaseAdministrator
arn:aws:iam::aws:policy/job-function/DataScientist DataScientist
arn:aws:iam::aws:policy/job-function/NetworkAdministrator NetworkAdministrator
arn:aws:iam::aws:policy/service-role/AmazonAppStreamServiceAccess AmazonAppStreamServiceAccess
arn:aws:iam::aws:policy/AWSOpsWorksCMInstanceProfileRole AWSOpsWorksCMInstanceProfileRole
arn:aws:iam::aws:policy/service-role/AWSOpsWorksCMServiceRole AWSOpsWorksCMServiceRole
arn:aws:iam::aws:policy/AmazonAthenaFullAccess AmazonAthenaFullAccess
arn:aws:iam::aws:policy/AWSCodeBuildDeveloperAccess AWSCodeBuildDeveloperAccess
arn:aws:iam::aws:policy/AWSCodeBuildAdminAccess AWSCodeBuildAdminAccess
arn:aws:iam::aws:policy/service-role/AWSQuicksightAthenaAccess AWSQuicksightAthenaAccess
arn:aws:iam::aws:policy/AWSDataPipeline_FullAccess AWSDataPipeline_FullAccess
arn:aws:iam::aws:policy/AWSDataPipeline_PowerUser AWSDataPipeline_PowerUser
arn:aws:iam::aws:policy/service-role/AWSGreengrassResourceAccessRolePolicy AWSGreengrassResourceAccessRolePolicy
arn:aws:iam::aws:policy/AWSElasticBeanstalkCustomPlatformforEC2Role AWSElasticBeanstalkCustomPlatformforEC2Role
arn:aws:iam::aws:policy/AmazonLexFullAccess AmazonLexFullAccess
arn:aws:iam::aws:policy/service-role/AWSCodeStarServiceRole AWSCodeStarServiceRole
arn:aws:iam::aws:policy/service-role/QuickSightAccessForS3StorageManagementAnalyticsReadOnly QuickSightAccessForS3StorageManagementAnalyticsReadOnly
arn:aws:iam::aws:policy/service-role/AWSGlueServiceRole AWSGlueServiceRole
arn:aws:iam::aws:policy/AWSGlueConsoleFullAccess AWSGlueConsoleFullAccess
arn:aws:iam::aws:policy/service-role/AWSGlueServiceNotebookRole AWSGlueServiceNotebookRole
arn:aws:iam::aws:policy/service-role/AmazonMacieServiceRole AmazonMacieServiceRole
arn:aws:iam::aws:policy/AmazonChimeFullAccess AmazonChimeFullAccess
arn:aws:iam::aws:policy/service-role/AWSCodeDeployRoleForLambda AWSCodeDeployRoleForLambda
arn:aws:iam::aws:policy/aws-service-role/AmazonGuardDutyServiceRolePolicy AmazonGuardDutyServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerFullAccess AmazonSageMakerFullAccess
arn:aws:iam::aws:policy/service-role/AWSDeepLensServiceRolePolicy AWSDeepLensServiceRolePolicy
arn:aws:iam::aws:policy/AWSDeepLensLambdaFunctionAccessPolicy AWSDeepLensLambdaFunctionAccessPolicy
arn:aws:iam::aws:policy/ComprehendFullAccess ComprehendFullAccess
arn:aws:iam::aws:policy/service-role/GreengrassOTAUpdateArtifactAccess GreengrassOTAUpdateArtifactAccess
arn:aws:iam::aws:policy/aws-service-role/AWSTrustedAdvisorServiceRolePolicy AWSTrustedAdvisorServiceRolePolicy
arn:aws:iam::aws:policy/AWSResourceGroupsReadOnlyAccess AWSResourceGroupsReadOnlyAccess
arn:aws:iam::aws:policy/AmazonTranscribeFullAccess AmazonTranscribeFullAccess
arn:aws:iam::aws:policy/SecretsManagerReadWrite SecretsManagerReadWrite
arn:aws:iam::aws:policy/AmazonElasticTranscoder_FullAccess AmazonElasticTranscoder_FullAccess
arn:aws:iam::aws:policy/AWSFMAdminFullAccess AWSFMAdminFullAccess
arn:aws:iam::aws:policy/AWSFMAdminReadOnlyAccess AWSFMAdminReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/AmazonElasticTranscoder_ReadOnlyAccess AmazonElasticTranscoder_ReadOnlyAccess
arn:aws:iam::aws:policy/AmazonElasticTranscoder_JobsSubmitter AmazonElasticTranscoder_JobsSubmitter
arn:aws:iam::aws:policy/aws-service-role/AmazonMacieServiceRolePolicy AmazonMacieServiceRolePolicy
arn:aws:iam::aws:policy/AWSElementalMediaConvertReadOnly AWSElementalMediaConvertReadOnly
arn:aws:iam::aws:policy/AWSElementalMediaConvertFullAccess AWSElementalMediaConvertFullAccess
arn:aws:iam::aws:policy/AWSMarketplaceImageBuildFullAccess AWSMarketplaceImageBuildFullAccess
arn:aws:iam::aws:policy/AWSDiscoveryContinuousExportFirehosePolicy AWSDiscoveryContinuousExportFirehosePolicy
arn:aws:iam::aws:policy/aws-service-role/ApplicationDiscoveryServiceContinuousExportServiceRolePolicy ApplicationDiscoveryServiceContinuousExportServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AmazonFreeRTOSOTAUpdate AmazonFreeRTOSOTAUpdate
arn:aws:iam::aws:policy/aws-service-role/AmazonConnectServiceLinkedRolePolicy AmazonConnectServiceLinkedRolePolicy
arn:aws:iam::aws:policy/aws-service-role/LightsailExportAccess LightsailExportAccess
arn:aws:iam::aws:policy/AWSGlueConsoleSageMakerNotebookFullAccess AWSGlueConsoleSageMakerNotebookFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerServiceRolePolicy AWSLicenseManagerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerMasterAccountRolePolicy AWSLicenseManagerMasterAccountRolePolicy
arn:aws:iam::aws:policy/AWSCodeDeployRoleForECS AWSCodeDeployRoleForECS
arn:aws:iam::aws:policy/AWSCodeDeployRoleForECSLimited AWSCodeDeployRoleForECSLimited
arn:aws:iam::aws:policy/TranslateFullAccess TranslateFullAccess
arn:aws:iam::aws:policy/AmazonFSxConsoleFullAccess AmazonFSxConsoleFullAccess
arn:aws:iam::aws:policy/aws-service-role/CloudwatchApplicationInsightsServiceLinkedRolePolicy CloudwatchApplicationInsightsServiceLinkedRolePolicy
arn:aws:iam::aws:policy/service-role/AmazonPersonalizeFullAccess AmazonPersonalizeFullAccess
arn:aws:iam::aws:policy/AWSDataSyncReadOnlyAccess AWSDataSyncReadOnlyAccess
arn:aws:iam::aws:policy/AWSDataSyncFullAccess AWSDataSyncFullAccess
arn:aws:iam::aws:policy/service-role/AWSDeepRacerServiceRolePolicy AWSDeepRacerServiceRolePolicy
arn:aws:iam::aws:policy/AWSDeepRacerCloudFormationAccessPolicy AWSDeepRacerCloudFormationAccessPolicy
arn:aws:iam::aws:policy/AWSDeepRacerRoboMakerAccessPolicy AWSDeepRacerRoboMakerAccessPolicy
arn:aws:iam::aws:policy/service-role/AWSControlTowerServiceRolePolicy AWSControlTowerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/LakeFormationDataAccessServiceRolePolicy LakeFormationDataAccessServiceRolePolicy
arn:aws:iam::aws:policy/CloudWatchAutomaticDashboardsAccess CloudWatchAutomaticDashboardsAccess
arn:aws:iam::aws:policy/aws-service-role/ConfigConformsServiceRolePolicy ConfigConformsServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForSMS AWSServiceRoleForSMS
arn:aws:iam::aws:policy/AWSLakeFormationDataAdmin AWSLakeFormationDataAdmin
arn:aws:iam::aws:policy/AWSForWordPressPluginPolicy AWSForWordPressPluginPolicy
arn:aws:iam::aws:policy/AmazonEC2RolePolicyForLaunchWizard AmazonEC2RolePolicyForLaunchWizard
arn:aws:iam::aws:policy/AWSDataExchangeSubscriberFullAccess AWSDataExchangeSubscriberFullAccess
arn:aws:iam::aws:policy/AWSDataExchangeProviderFullAccess AWSDataExchangeProviderFullAccess
arn:aws:iam::aws:policy/AWSDataExchangeFullAccess AWSDataExchangeFullAccess
arn:aws:iam::aws:policy/AWSBackupFullAccess AWSBackupFullAccess
arn:aws:iam::aws:policy/AWSBackupOperatorAccess AWSBackupOperatorAccess
arn:aws:iam::aws:policy/aws-service-role/AWSElasticBeanstalkManagedUpdatesServiceRolePolicy AWSElasticBeanstalkManagedUpdatesServiceRolePolicy
arn:aws:iam::aws:policy/CloudWatchSyntheticsFullAccess CloudWatchSyntheticsFullAccess
arn:aws:iam::aws:policy/EC2InstanceProfileForImageBuilder EC2InstanceProfileForImageBuilder
arn:aws:iam::aws:policy/aws-service-role/AccessAnalyzerServiceRolePolicy AccessAnalyzerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonCodeGuruReviewerServiceRolePolicy AmazonCodeGuruReviewerServiceRolePolicy
arn:aws:iam::aws:policy/AmazonKendraFullAccess AmazonKendraFullAccess
arn:aws:iam::aws:policy/AmazonFraudDetectorFullAccessPolicy AmazonFraudDetectorFullAccessPolicy
arn:aws:iam::aws:policy/AWSImageBuilderFullAccess AWSImageBuilderFullAccess
arn:aws:iam::aws:policy/AmazonRekognitionCustomLabelsFullAccess AmazonRekognitionCustomLabelsFullAccess
arn:aws:iam::aws:policy/service-role/AWSQuickSightSageMakerPolicy AWSQuickSightSageMakerPolicy
arn:aws:iam::aws:policy/AWSIoTDeviceTesterForFreeRTOSFullAccess AWSIoTDeviceTesterForFreeRTOSFullAccess
arn:aws:iam::aws:policy/AWSIoTDeviceTesterForGreengrassFullAccess AWSIoTDeviceTesterForGreengrassFullAccess
arn:aws:iam::aws:policy/AWSWAFConsoleFullAccess AWSWAFConsoleFullAccess
arn:aws:iam::aws:policy/ServerMigrationServiceConsoleFullAccess ServerMigrationServiceConsoleFullAccess
arn:aws:iam::aws:policy/AWSThinkboxAWSPortalGatewayPolicy AWSThinkboxAWSPortalGatewayPolicy
arn:aws:iam::aws:policy/AWSThinkboxAWSPortalWorkerPolicy AWSThinkboxAWSPortalWorkerPolicy
arn:aws:iam::aws:policy/AWSThinkboxAssetServerPolicy AWSThinkboxAssetServerPolicy
arn:aws:iam::aws:policy/AWSThinkboxDeadlineResourceTrackerAdminPolicy AWSThinkboxDeadlineResourceTrackerAdminPolicy
arn:aws:iam::aws:policy/AWSThinkboxAWSPortalAdminPolicy AWSThinkboxAWSPortalAdminPolicy
arn:aws:iam::aws:policy/aws-service-role/AWSBackupServiceLinkedRolePolicyForBackup AWSBackupServiceLinkedRolePolicyForBackup
arn:aws:iam::aws:policy/AmazonAppFlowFullAccess AmazonAppFlowFullAccess
arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkRoleCore AWSElasticBeanstalkRoleCore
arn:aws:iam::aws:policy/service-role/AmazonMachineLearningRoleforRedshiftDataSourceV3 AmazonMachineLearningRoleforRedshiftDataSourceV3
arn:aws:iam::aws:policy/AmazonSageMakerGroundTruthExecution AmazonSageMakerGroundTruthExecution
arn:aws:iam::aws:policy/service-role/ServerMigrationServiceRoleForInstanceValidation ServerMigrationServiceRoleForInstanceValidation
arn:aws:iam::aws:policy/AWSCodePipeline_ReadOnlyAccess AWSCodePipeline_ReadOnlyAccess
arn:aws:iam::aws:policy/AWSCodePipeline_FullAccess AWSCodePipeline_FullAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonBraketServiceRolePolicy AmazonBraketServiceRolePolicy
arn:aws:iam::aws:policy/AmazonBraketFullAccess AmazonBraketFullAccess
arn:aws:iam::aws:policy/aws-service-role/Route53ResolverServiceRolePolicy Route53ResolverServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSCodeDeployRoleForLambdaLimited AWSCodeDeployRoleForLambdaLimited
arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforAWSCodeDeployLimited AmazonEC2RoleforAWSCodeDeployLimited
arn:aws:iam::aws:policy/AWSRoboMaker_FullAccess AWSRoboMaker_FullAccess
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/AmazonTimestreamFullAccess AmazonTimestreamFullAccess
arn:aws:iam::aws:policy/AmazonTimestreamConsoleFullAccess AmazonTimestreamConsoleFullAccess
arn:aws:iam::aws:policy/AWSDeepRacerFullAccess AWSDeepRacerFullAccess
arn:aws:iam::aws:policy/AWSCloudTrail_FullAccess AWSCloudTrail_FullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/AwsGlueDataBrewFullAccessPolicy AwsGlueDataBrewFullAccessPolicy
arn:aws:iam::aws:policy/AmazonConnect_FullAccess AmazonConnect_FullAccess
arn:aws:iam::aws:policy/CloudWatchApplicationInsightsFullAccess CloudWatchApplicationInsightsFullAccess
arn:aws:iam::aws:policy/AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonDevOpsGuruServiceRolePolicy AmazonDevOpsGuruServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSPanoramaGreengrassGroupRolePolicy AWSPanoramaGreengrassGroupRolePolicy
arn:aws:iam::aws:policy/AWSPanoramaFullAccess AWSPanoramaFullAccess
arn:aws:iam::aws:policy/service-role/AWSPanoramaSageMakerRolePolicy AWSPanoramaSageMakerRolePolicy
arn:aws:iam::aws:policy/service-role/AWSPanoramaServiceRolePolicy AWSPanoramaServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerFeatureStoreAccess AmazonSageMakerFeatureStoreAccess
arn:aws:iam::aws:policy/AdministratorAccess-Amplify AdministratorAccess-Amplify
arn:aws:iam::aws:policy/service-role/AWSGlueDataBrewServiceRole AWSGlueDataBrewServiceRole
arn:aws:iam::aws:policy/aws-service-role/IVSRecordToS3 IVSRecordToS3
arn:aws:iam::aws:policy/aws-service-role/AWSAuditManagerServiceRolePolicy AWSAuditManagerServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AmazonSageMakerEdgeDeviceFleetPolicy AmazonSageMakerEdgeDeviceFleetPolicy
arn:aws:iam::aws:policy/EC2InstanceProfileForImageBuilderECRContainerBuilds EC2InstanceProfileForImageBuilderECRContainerBuilds
arn:aws:iam::aws:policy/AWSAuditManagerAdministratorAccess AWSAuditManagerAdministratorAccess
arn:aws:iam::aws:policy/AWSTransferConsoleFullAccess AWSTransferConsoleFullAccess
arn:aws:iam::aws:policy/AWSElasticBeanstalkReadOnly AWSElasticBeanstalkReadOnly
arn:aws:iam::aws:policy/AdministratorAccess-AWSElasticBeanstalk AdministratorAccess-AWSElasticBeanstalk
arn:aws:iam::aws:policy/AmazonHealthLakeFullAccess AmazonHealthLakeFullAccess
arn:aws:iam::aws:policy/AWSProtonDeveloperAccess AWSProtonDeveloperAccess
arn:aws:iam::aws:policy/AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy
arn:aws:iam::aws:policy/AmazonEMRFullAccessPolicy_v2 AmazonEMRFullAccessPolicy_v2
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV2 AWSCompromisedKeyQuarantineV2
arn:aws:iam::aws:policy/AmazonLookoutVisionConsoleReadOnlyAccess AmazonLookoutVisionConsoleReadOnlyAccess
arn:aws:iam::aws:policy/AmazonLookoutVisionConsoleFullAccess AmazonLookoutVisionConsoleFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRolePolicyForBackupReports AWSServiceRolePolicyForBackupReports
arn:aws:iam::aws:policy/AWSBackupAuditAccess AWSBackupAuditAccess
arn:aws:iam::aws:policy/aws-service-role/AWSMigrationHubStrategyServiceRolePolicy AWSMigrationHubStrategyServiceRolePolicy
arn:aws:iam::aws:policy/AWSMigrationHubStrategyConsoleFullAccess AWSMigrationHubStrategyConsoleFullAccess
arn:aws:iam::aws:policy/AWSMigrationHubStrategyCollector AWSMigrationHubStrategyCollector
arn:aws:iam::aws:policy/service-role/AWSPanoramaApplianceServiceRolePolicy AWSPanoramaApplianceServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSCostAndUsageReportAutomationPolicy AWSCostAndUsageReportAutomationPolicy
arn:aws:iam::aws:policy/AmazonRedshiftAllCommandsFullAccess AmazonRedshiftAllCommandsFullAccess
arn:aws:iam::aws:policy/AWSElasticDisasterRecoveryConsoleFullAccess AWSElasticDisasterRecoveryConsoleFullAccess
arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess AmazonGrafanaAthenaAccess
arn:aws:iam::aws:policy/AmazonBraketJobsExecutionPolicy AmazonBraketJobsExecutionPolicy
arn:aws:iam::aws:policy/AmazonCloudWatchEvidentlyFullAccess AmazonCloudWatchEvidentlyFullAccess
arn:aws:iam::aws:policy/AWSBackupServiceRolePolicyForS3Restore AWSBackupServiceRolePolicyForS3Restore
arn:aws:iam::aws:policy/AWSBackupServiceRolePolicyForS3Backup AWSBackupServiceRolePolicyForS3Backup
arn:aws:iam::aws:policy/service-role/AmazonSageMakerServiceCatalogProductsGlueServiceRolePolicy AmazonSageMakerServiceCatalogProductsGlueServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AmazonSageMakerServiceCatalogProductsCodePipelineServiceRolePolicy AmazonSageMakerServiceCatalogProductsCodePipelineServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerServiceCatalogProductsCodeBuildServiceRolePolicy AmazonSageMakerServiceCatalogProductsCodeBuildServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AmazonSageMakerServiceCatalogProductsLambdaServiceRolePolicy AmazonSageMakerServiceCatalogProductsLambdaServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AwsGlueSessionUserRestrictedServiceRole AwsGlueSessionUserRestrictedServiceRole
arn:aws:iam::aws:policy/service-role/AwsGlueSessionUserRestrictedNotebookServiceRole AwsGlueSessionUserRestrictedNotebookServiceRole
arn:aws:iam::aws:policy/aws-service-role/AWSMigrationHubOrchestratorServiceRolePolicy AWSMigrationHubOrchestratorServiceRolePolicy
arn:aws:iam::aws:policy/AWSMigrationHubOrchestratorPlugin AWSMigrationHubOrchestratorPlugin
arn:aws:iam::aws:policy/AWSMigrationHubOrchestratorConsoleFullAccess AWSMigrationHubOrchestratorConsoleFullAccess
arn:aws:iam::aws:policy/AWSMigrationHubOrchestratorInstanceRolePolicy AWSMigrationHubOrchestratorInstanceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSManagedServicesDeploymentToolkitPolicy AWSManagedServicesDeploymentToolkitPolicy
arn:aws:iam::aws:policy/service-role/AmazonSageMakerCanvasForecastAccess AmazonSageMakerCanvasForecastAccess
arn:aws:iam::aws:policy/GroundTruthSyntheticConsoleReadOnlyAccess GroundTruthSyntheticConsoleReadOnlyAccess
arn:aws:iam::aws:policy/GroundTruthSyntheticConsoleFullAccess GroundTruthSyntheticConsoleFullAccess
arn:aws:iam::aws:policy/AmazonSageMakerCanvasFullAccess AmazonSageMakerCanvasFullAccess
arn:aws:iam::aws:policy/AWSRefactoringToolkitSidecarPolicy AWSRefactoringToolkitSidecarPolicy
arn:aws:iam::aws:policy/AWSRefactoringToolkitFullAccess AWSRefactoringToolkitFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy AWSResourceExplorerServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSecurityLakePermissionsBoundary AmazonSecurityLakePermissionsBoundary
arn:aws:iam::aws:policy/AmazonSageMakerModelGovernanceUseAccess AmazonSageMakerModelGovernanceUseAccess
arn:aws:iam::aws:policy/service-role/AmazonSageMakerGeospatialExecutionRole AmazonSageMakerGeospatialExecutionRole
arn:aws:iam::aws:policy/aws-service-role/AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy
arn:aws:iam::aws:policy/AWSCleanRoomsFullAccess AWSCleanRoomsFullAccess
arn:aws:iam::aws:policy/service-role/AWSSupplyChainFederationAdminAccess AWSSupplyChainFederationAdminAccess
arn:aws:iam::aws:policy/aws-service-role/AWSManagedServices_ContactsServiceRolePolicy AWSManagedServices_ContactsServiceRolePolicy
arn:aws:iam::aws:policy/VPCLatticeReadOnlyAccess VPCLatticeReadOnlyAccess
arn:aws:iam::aws:policy/VPCLatticeFullAccess VPCLatticeFullAccess
arn:aws:iam::aws:policy/AmazonSageMakerModelRegistryFullAccess AmazonSageMakerModelRegistryFullAccess
arn:aws:iam::aws:policy/service-role/ROSAImageRegistryOperatorPolicy ROSAImageRegistryOperatorPolicy
arn:aws:iam::aws:policy/aws-service-role/AWSDMSServerlessServiceRolePolicy AWSDMSServerlessServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSecurityLakeAdministrator AmazonSecurityLakeAdministrator
arn:aws:iam::aws:policy/aws-service-role/AWSAppFabricServiceRolePolicy AWSAppFabricServiceRolePolicy
arn:aws:iam::aws:policy/AWSResilienceHubAsssessmentExecutionPolicy AWSResilienceHubAsssessmentExecutionPolicy
arn:aws:iam::aws:policy/AWSAppFabricFullAccess AWSAppFabricFullAccess
arn:aws:iam::aws:policy/service-role/AmazonSageMakerPartnerServiceCatalogProductsCloudFormationServiceRolePolicy AmazonSageMakerPartnerServiceCatalogProductsCloudFormationServiceRolePolicy
arn:aws:iam::aws:policy/AWSEntityResolutionConsoleFullAccess AWSEntityResolutionConsoleFullAccess
arn:aws:iam::aws:policy/AmazonLaunchWizardFullAccessV2 AmazonLaunchWizardFullAccessV2
arn:aws:iam::aws:policy/AmazonDataZoneEnvironmentRolePermissionsBoundary AmazonDataZoneEnvironmentRolePermissionsBoundary
arn:aws:iam::aws:policy/AmazonDataZoneFullAccess AmazonDataZoneFullAccess
arn:aws:iam::aws:policy/AmazonDataZoneRedshiftGlueProvisioningPolicy AmazonDataZoneRedshiftGlueProvisioningPolicy
arn:aws:iam::aws:policy/service-role/AmazonDataZoneGlueManageAccessRolePolicy AmazonDataZoneGlueManageAccessRolePolicy
arn:aws:iam::aws:policy/service-role/AmplifyBackendDeployFullAccess AmplifyBackendDeployFullAccess
arn:aws:iam::aws:policy/AmazonSageMakerCanvasDataPrepFullAccess AmazonSageMakerCanvasDataPrepFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRolePolicyForBackupRestoreTesting AWSServiceRolePolicyForBackupRestoreTesting
arn:aws:iam::aws:policy/AWSElasticDisasterRecoveryConsoleFullAccess_v2 AWSElasticDisasterRecoveryConsoleFullAccess_v2
arn:aws:iam::aws:policy/AmazonSageMakerClusterInstanceRolePolicy AmazonSageMakerClusterInstanceRolePolicy
arn:aws:iam::aws:policy/AWSCleanRoomsMLFullAccess AWSCleanRoomsMLFullAccess
arn:aws:iam::aws:policy/service-role/AmazonSecurityLakeMetastoreManager AmazonSecurityLakeMetastoreManager
arn:aws:iam::aws:policy/AmazonSageMakerCanvasBedrockAccess AmazonSageMakerCanvasBedrockAccess
arn:aws:iam::aws:policy/AmazonRDSCustomInstanceProfileRolePolicy AmazonRDSCustomInstanceProfileRolePolicy
arn:aws:iam::aws:policy/AmazonTimestreamInfluxDBFullAccess AmazonTimestreamInfluxDBFullAccess
arn:aws:iam::aws:policy/AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
arn:aws:iam::aws:policy/AmazonDataZoneSageMakerManageAccessRolePolicy AmazonDataZoneSageMakerManageAccessRolePolicy
arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyBaselineAccess AWSQuickSetupPatchPolicyBaselineAccess
arn:aws:iam::aws:policy/AWSSystemsManagerEnableConfigRecordingExecutionPolicy AWSSystemsManagerEnableConfigRecordingExecutionPolicy
arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyPermissionsBoundary AWSQuickSetupPatchPolicyPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyDeploymentRolePolicy AWSQuickSetupPatchPolicyDeploymentRolePolicy
arn:aws:iam::aws:policy/AmazonWorkSpacesPoolServiceAccess AmazonWorkSpacesPoolServiceAccess
arn:aws:iam::aws:policy/AmazonSageMakerCanvasEMRServerlessExecutionRolePolicy AmazonSageMakerCanvasEMRServerlessExecutionRolePolicy
arn:aws:iam::aws:policy/AmazonBedrockStudioPermissionsBoundary AmazonBedrockStudioPermissionsBoundary
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV3 AWSCompromisedKeyQuarantineV3
arn:aws:iam::aws:policy/ResourceGroupsTaggingAPITagUntagSupportedResources ResourceGroupsTaggingAPITagUntagSupportedResources
arn:aws:iam::aws:policy/GameLiftContainerFleetPolicy GameLiftContainerFleetPolicy
arn:aws:iam::aws:policy/aws-service-role/SecurityLakeResourceManagementServiceRolePolicy SecurityLakeResourceManagementServiceRolePolicy
arn:aws:iam::aws:policy/root-task/S3UnlockBucketPolicy S3UnlockBucketPolicy
arn:aws:iam::aws:policy/AWSQuickSetupSSMDeploymentS3BucketRolePolicy AWSQuickSetupSSMDeploymentS3BucketRolePolicy
arn:aws:iam::aws:policy/AWSQuickSetupSSMManageResourcesExecutionPolicy AWSQuickSetupSSMManageResourcesExecutionPolicy
arn:aws:iam::aws:policy/AWS-SSM-Automation-DiagnosisBucketPolicy AWS-SSM-Automation-DiagnosisBucketPolicy
arn:aws:iam::aws:policy/AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy
arn:aws:iam::aws:policy/AWS-SSM-RemediationAutomation-AdministrationRolePolicy AWS-SSM-RemediationAutomation-AdministrationRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectRoleMachineLearningPolicy SageMakerStudioProjectRoleMachineLearningPolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePermissionsBoundary SageMakerStudioProjectUserRolePermissionsBoundary
arn:aws:iam::aws:policy/service-role/SageMakerStudioProjectProvisioningRolePolicy SageMakerStudioProjectProvisioningRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePolicy SageMakerStudioProjectUserRolePolicy
arn:aws:iam::aws:policy/AWSPartnerLedSupportReadOnlyAccess AWSPartnerLedSupportReadOnlyAccess
arn:aws:iam::aws:policy/SageMakerStudioFullAccess SageMakerStudioFullAccess
arn:aws:iam::aws:policy/AIOpsAssistantPolicy AIOpsAssistantPolicy
arn:aws:iam::aws:policy/AWSBackupServiceRolePolicyForItemRestores AWSBackupServiceRolePolicyForItemRestores
arn:aws:iam::aws:policy/service-role/SageMakerStudioQueryExecutionRolePolicy SageMakerStudioQueryExecutionRolePolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockAgentServiceRolePolicy SageMakerStudioBedrockAgentServiceRolePolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockChatAgentUserRolePolicy SageMakerStudioBedrockChatAgentUserRolePolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockPromptUserRolePolicy SageMakerStudioBedrockPromptUserRolePolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockEvaluationJobServiceRolePolicy SageMakerStudioBedrockEvaluationJobServiceRolePolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockKnowledgeBaseServiceRolePolicy SageMakerStudioBedrockKnowledgeBaseServiceRolePolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioEMRInstanceRolePolicy SageMakerStudioEMRInstanceRolePolicy

Allowed Actions

Action Service
s3:* s3
s3:MultipartUpload s3
s3:Abort* s3
s3:AbortMultipartUpload s3
s3:CreateBucket s3
s3:Delete* s3
s3:DeleteBucket s3
s3:DeleteBucketPolicy s3
s3:DeleteBucketWebsite s3
s3:DeleteJobTagging s3
s3:DeleteObject s3
s3:DeleteObject* s3
s3:DeleteObjectTagging s3
s3:DeleteObjectVersion s3
s3:DeleteObjectVersionTagging s3
s3:DeleteStorageLensConfigurationTagging s3
s3:Describe* s3
s3:DescribeJob s3
s3:DescribeMultiRegionAccessPointOperation s3
s3:Get* s3
s3:GetAccelerateConfiguration s3
s3:GetAccessGrant s3
s3:GetAccessGrantsInstance s3
s3:GetAccessGrantsInstanceResourcePolicy s3
s3:GetAccessGrantsLocation s3
s3:GetAccessPoint s3
s3:GetAccessPointConfigurationForObjectLambda s3
s3:GetAccessPointForObjectLambda s3
s3:GetAccessPointPolicy s3
s3:GetAccessPointPolicyForObjectLambda s3
s3:GetAccessPointPolicyStatus s3
s3:GetAccessPointPolicyStatusForObjectLambda s3
s3:GetAccountPublicAccessBlock s3
s3:GetAnalyticsConfiguration s3
s3:GetBucket* s3
s3:GetBucketAcl s3
s3:GetBucketCORS s3
s3:GetBucketCors s3
s3:GetBucketLocation s3
s3:GetBucketLogging s3
s3:GetBucketNotification s3
s3:GetBucketObjectLockConfiguration s3
s3:GetBucketOwnershipControls s3
s3:GetBucketPolicy s3
s3:GetBucketPolicyStatus s3
s3:GetBucketPublicAccessBlock s3
s3:GetBucketRequestPayment s3
s3:GetBucketTagging s3
s3:GetBucketVersioning s3
s3:GetBucketWebsite s3
s3:GetEncryptionConfiguration s3
s3:GetIntelligentTieringConfiguration s3
s3:GetInventoryConfiguration s3
s3:GetJobTagging s3
s3:GetLifecycleConfiguration s3
s3:GetMetricsConfiguration s3
s3:GetMultiRegionAccessPoint s3
s3:GetMultiRegionAccessPointPolicy s3
s3:GetMultiRegionAccessPointPolicyStatus s3
s3:GetMultiRegionAccessPointRoutes s3
s3:GetObject s3
s3:GetObject* s3
s3:GetObjectAcl s3
s3:GetObjectAttributes s3
s3:GetObjectLegalHold s3
s3:GetObjectRetention s3
s3:GetObjectTagging s3
s3:GetObjectVersion s3
s3:GetObjectVersionAcl s3
s3:GetObjectVersionAttributes s3
s3:GetObjectVersionForReplication s3
s3:GetObjectVersionTagging s3
s3:GetObjectVersionTorrent s3
s3:GetReplicationConfiguration s3
s3:GetStorageLensConfiguration s3
s3:GetStorageLensConfigurationTagging s3
s3:GetStorageLensGroup s3
s3:List* s3
s3:ListAccessGrants s3
s3:ListAccessGrantsInstances s3
s3:ListAccessGrantsLocations s3
s3:ListAccessPoints s3
s3:ListAccessPointsForObjectLambda s3
s3:ListAllMyBuckets s3
s3:ListBucket s3
s3:ListBucketMultipartUploads s3
s3:ListBucketVersions s3
s3:ListCallerAccessGrants s3
s3:ListJobs s3
s3:ListMultiRegionAccessPoints s3
s3:ListMultipartUploadParts s3
s3:ListStorageLensConfigurations s3
s3:ListStorageLensGroups s3
s3:ListTagsForResource s3
s3:ObjectOwnerOverrideToBucketOwner s3
s3:Put* s3
s3:PutAccelerateConfiguration s3
s3:PutAccountPublicAccessBlock s3
s3:PutBucketAcl s3
s3:PutBucketCORS s3
s3:PutBucketCors s3
s3:PutBucketLogging s3
s3:PutBucketNotification s3
s3:PutBucketObjectLockConfiguration s3
s3:PutBucketOwnershipControls s3
s3:PutBucketPolicy s3
s3:PutBucketPublicAccessBlock s3
s3:PutBucketTagging s3
s3:PutBucketVersioning s3
s3:PutBucketWebsite s3
s3:PutEncryptionConfiguration s3
s3:PutInventoryConfiguration s3
s3:PutJobTagging s3
s3:PutLifecycleConfiguration s3
s3:PutObject s3
s3:PutObject* s3
s3:PutObjectAcl s3
s3:PutObjectRetention s3
s3:PutObjectTagging s3
s3:PutObjectVersionAcl s3
s3:PutObjectVersionTagging s3
s3:PutReplicationConfiguration s3
s3:PutStorageLensConfigurationTagging s3
s3:Replicate* s3
s3:ReplicateObject s3
s3:RestoreObject s3
s3:TagResource s3
s3:UntagResource s3
s3:describeJob s3
s3:describeMultiRegionAccessPointOperation s3
s3:getAccelerateConfiguration s3
s3:getAccessPoint s3
s3:getAccessPointConfigurationForObjectLambda s3
s3:getAccessPointForObjectLambda s3
s3:getAccessPointPolicy s3
s3:getAccessPointPolicyForObjectLambda s3
s3:getAccessPointPolicyStatus s3
s3:getAccessPointPolicyStatusForObjectLambda s3
s3:getAccountPublicAccessBlock s3
s3:getAnalyticsConfiguration s3
s3:getBucketAcl s3
s3:getBucketCORS s3
s3:getBucketLocation s3
s3:getBucketLogging s3
s3:getBucketNotification s3
s3:getBucketObjectLockConfiguration s3
s3:getBucketOwnershipControls s3
s3:getBucketPolicy s3
s3:getBucketPolicyStatus s3
s3:getBucketPublicAccessBlock s3
s3:getBucketRequestPayment s3
s3:getBucketVersioning s3
s3:getBucketWebsite s3
s3:getEncryptionConfiguration s3
s3:getIntelligentTieringConfiguration s3
s3:getInventoryConfiguration s3
s3:getLifecycleConfiguration s3
s3:getMetricsConfiguration s3
s3:getMultiRegionAccessPoint s3
s3:getMultiRegionAccessPointPolicy s3
s3:getMultiRegionAccessPointPolicyStatus s3
s3:getMultiRegionAccessPointRoutes s3
s3:getObject s3
s3:getObjectLegalHold s3
s3:getObjectRetention s3
s3:getObjectVersion s3
s3:getReplicationConfiguration s3
s3:getStorageLensConfiguration s3
s3:listAccessPoints s3
s3:listAccessPointsForObjectLambda s3
s3:listAllMyBuckets s3
s3:listBucket s3
s3:listBucketMultipartUploads s3
s3:listBucketVersions s3
s3:listJobs s3
s3:listMultiRegionAccessPoints s3
s3:listMultipartUploadParts s3
s3:listStorageLensConfigurations s3
s3:putObject s3