Supported AWS Entities for Real-time Protection
Supported AWS Entities for Real-time Protection
Netskope for IaaS Real-time Protection provides robust real-time activity monitoring and enforcement for AWS Services across API and Browser/Console traffic. The following table provides the list of AWS services that are supported for Real-time Protection.
| AWS App Name | Action Name | Connector Activity Name | Browser and API Traffic |
|---|---|---|---|
| Amazon API Gateway | UpdateStage | Edit | Yes |
| Amazon API Gateway | GetStage | View | Yes |
| Amazon API Gateway | DeleteStage | Delete | Yes |
| Amazon API Gateway | GenerateClientCertificate | Create | Yes |
| Amazon API Gateway | GetClientCertificates | View | Yes |
| Amazon API Gateway | GetGatewayResponses | View | Yes |
| Amazon API Gateway | CreateUsagePlan | Create | Yes |
| Amazon API Gateway | GetUsagePlans | View | Yes |
| Amazon API Gateway | CreateApiKey | Create | Yes |
| Amazon API Gateway | GetApiKeys | View | Yes |
| Amazon API Gateway | PutIntegrationResponse | Edit | Yes |
| Amazon API Gateway | UpdateIntegrationResponse | Edit | Yes |
| Amazon API Gateway | GetIntegrationResponse | View | Yes |
| Amazon API Gateway | DeleteIntegrationResponse | Delete | Yes |
| Amazon API Gateway | UpdateUsage | Edit | Yes |
| Amazon API Gateway | UpdateApiKey | Edit | Yes |
| Amazon API Gateway | GetApiKey | View | Yes |
| Amazon API Gateway | DeleteApiKey | Delete | Yes |
| Amazon API Gateway | FlushStageCache | Delete | Yes |
| Amazon API Gateway | UpdateClientCertificate | Edit | Yes |
| Amazon API Gateway | GetClientCertificate | View | Yes |
| Amazon API Gateway | DeleteClientCertificate | Delete | Yes |
| Amazon API Gateway | UpdateResource | Edit | Yes |
| Amazon API Gateway | GetResource | View | Yes |
| Amazon API Gateway | DeleteResource | Delete | Yes |
| Amazon API Gateway | ImportDocumentationParts | Create | Yes |
| Amazon API Gateway | CreateDocumentationPart | Create | Yes |
| Amazon API Gateway | GetDocumentationParts | View | Yes |
| Amazon API Gateway | UpdateDeployment | Edit | Yes |
| Amazon API Gateway | GetDeployment | View | Yes |
| Amazon API Gateway | DeleteDeployment | Delete | Yes |
| Amazon API Gateway | CreateStage | Create | Yes |
| Amazon API Gateway | GetStages | View | Yes |
| Amazon API Gateway | UpdateDocumentationPart | Edit | Yes |
| Amazon API Gateway | GetDocumentationPart | View | Yes |
| Amazon API Gateway | DeleteDocumentationPart | Delete | Yes |
| Amazon API Gateway | UpdateAuthorizer | Edit | Yes |
| Amazon API Gateway | TestInvokeAuthorizer | Create | Yes |
| Amazon API Gateway | GetAuthorizer | View | Yes |
| Amazon API Gateway | DeleteAuthorizer | Delete | Yes |
| Amazon API Gateway | CreateAuthorizer | Create | Yes |
| Amazon API Gateway | GetAuthorizers | View | Yes |
| Amazon API Gateway | UpdateDocumentationVersion | Edit | Yes |
| Amazon API Gateway | GetDocumentationVersion | View | Yes |
| Amazon API Gateway | DeleteDocumentationVersion | Delete | Yes |
| Amazon API Gateway | GetSdkTypes | View | Yes |
| Amazon API Gateway | UpdateModel | Edit | Yes |
| Amazon API Gateway | GetModel | View | Yes |
| Amazon API Gateway | DeleteModel | Delete | Yes |
| Amazon API Gateway | CreateVpcLink | Create | Yes |
| Amazon API Gateway | GetVpcLinks | View | Yes |
| Amazon API Gateway | CreateRestApi | Create | Yes |
| Amazon API Gateway | GetRestApis | View | Yes |
| Amazon API Gateway | UpdateRequestValidator | Edit | Yes |
| Amazon API Gateway | GetRequestValidator | View | Yes |
| Amazon API Gateway | DeleteRequestValidator | Delete | Yes |
| Amazon API Gateway | ImportApiKeys | Create | Yes |
| Amazon API Gateway | GetMethod | View | Yes |
| Amazon API Gateway | UpdateMethod | Edit | Yes |
| Amazon API Gateway | PutMethod | Edit | Yes |
| Amazon API Gateway | TestInvokeMethod | Create | Yes |
| Amazon API Gateway | DeleteMethod | Delete | Yes |
| Amazon API Gateway | CreateUsagePlanKey | Create | Yes |
| Amazon API Gateway | GetUsagePlanKeys | View | Yes |
| Amazon API Gateway | UpdateVpcLink | Edit | Yes |
| Amazon API Gateway | GetVpcLink | View | Yes |
| Amazon API Gateway | DeleteVpcLink | Delete | Yes |
| Amazon API Gateway | GetUsagePlanKey | View | Yes |
| Amazon API Gateway | DeleteUsagePlanKey | Delete | Yes |
| Amazon API Gateway | CreateDocumentationVersion | Create | Yes |
| Amazon API Gateway | GetDocumentationVersions | View | Yes |
| Amazon API Gateway | GetModelTemplate | View | Yes |
| Amazon API Gateway | CreateRequestValidator | Create | Yes |
| Amazon API Gateway | GetRequestValidators | View | Yes |
| Amazon API Gateway | UpdateBasePathMapping | Edit | Yes |
| Amazon API Gateway | GetBasePathMapping | View | Yes |
| Amazon API Gateway | DeleteBasePathMapping | Delete | Yes |
| Amazon API Gateway | GetExport | View | Yes |
| Amazon API Gateway | PutRestApi | Edit | Yes |
| Amazon API Gateway | UpdateRestApi | Edit | Yes |
| Amazon API Gateway | GetRestApi | View | Yes |
| Amazon API Gateway | DeleteRestApi | Delete | Yes |
| Amazon API Gateway | PutMethodResponse | Edit | Yes |
| Amazon API Gateway | UpdateMethodResponse | Edit | Yes |
| Amazon API Gateway | GetMethodResponse | View | Yes |
| Amazon API Gateway | DeleteMethodResponse | Delete | Yes |
| Amazon API Gateway | UpdateUsagePlan | Edit | Yes |
| Amazon API Gateway | GetUsagePlan | View | Yes |
| Amazon API Gateway | DeleteUsagePlan | Delete | Yes |
| Amazon API Gateway | GetUsage | View | Yes |
| Amazon API Gateway | UpdateAccount | Edit | Yes |
| Amazon API Gateway | GetAccount | View | Yes |
| Amazon API Gateway | UntagResource | Delete | Yes |
| Amazon API Gateway | GetResources | View | Yes |
| Amazon API Gateway | CreateResource | Create | Yes |
| Amazon API Gateway | TagResource | Create | Yes |
| Amazon API Gateway | GetTags | View | Yes |
| Amazon API Gateway | FlushStageAuthorizersCache | Delete | Yes |
| Amazon API Gateway | ImportRestApi | Create | Yes |
| Amazon API Gateway | CreateDomainName | Create | Yes |
| Amazon API Gateway | GetDomainNames | View | Yes |
| Amazon API Gateway | UpdateDomainName | Edit | Yes |
| Amazon API Gateway | GetDomainName | View | Yes |
| Amazon API Gateway | DeleteDomainName | Delete | Yes |
| Amazon API Gateway | CreateDeployment | Create | Yes |
| Amazon API Gateway | GetDeployments | View | Yes |
| Amazon API Gateway | GetSdkType | View | Yes |
| Amazon API Gateway | PutGatewayResponse | Edit | Yes |
| Amazon API Gateway | UpdateGatewayResponse | Edit | Yes |
| Amazon API Gateway | GetGatewayResponse | View | Yes |
| Amazon API Gateway | DeleteGatewayResponse | Delete | Yes |
| Amazon API Gateway | PutIntegration | Edit | Yes |
| Amazon API Gateway | UpdateIntegration | Edit | Yes |
| Amazon API Gateway | GetIntegration | View | Yes |
| Amazon API Gateway | DeleteIntegration | Delete | Yes |
| Amazon API Gateway | CreateModel | Create | Yes |
| Amazon API Gateway | GetModels | View | Yes |
| Amazon API Gateway | GetSdk | View | Yes |
| Amazon API Gateway | CreateBasePathMapping | Create | Yes |
| Amazon API Gateway | GetBasePathMappings | View | Yes |
| Amazon API Gateway Management API | PostToConnection | Create | Yes |
| Amazon API Gateway Management API | GetConnection | View | Yes |
| Amazon API Gateway Management API | DeleteConnection | Delete | Yes |
| Amazon API Gateway V2 | UpdateVpcLink | Edit | Yes |
| Amazon API Gateway V2 | GetVpcLink | View | Yes |
| Amazon API Gateway V2 | DeleteVpcLink | Delete | Yes |
| Amazon API Gateway V2 | DeleteCorsConfiguration | Delete | Yes |
| Amazon API Gateway V2 | CreateApiMapping | Create | Yes |
| Amazon API Gateway V2 | GetApiMappings | View | Yes |
| Amazon API Gateway V2 | CreateVpcLink | Create | Yes |
| Amazon API Gateway V2 | GetVpcLinks | View | Yes |
| Amazon API Gateway V2 | CreateIntegrationResponse | Create | Yes |
| Amazon API Gateway V2 | GetIntegrationResponses | View | Yes |
| Amazon API Gateway V2 | DeleteRouteSettings | Delete | Yes |
| Amazon API Gateway V2 | UpdateIntegration | Edit | Yes |
| Amazon API Gateway V2 | GetIntegration | View | Yes |
| Amazon API Gateway V2 | DeleteIntegration | Delete | Yes |
| Amazon API Gateway V2 | CreateRouteResponse | Create | Yes |
| Amazon API Gateway V2 | GetRouteResponses | View | Yes |
| Amazon API Gateway V2 | CreateIntegration | Create | Yes |
| Amazon API Gateway V2 | GetIntegrations | View | Yes |
| Amazon API Gateway V2 | CreateDeployment | Create | Yes |
| Amazon API Gateway V2 | GetDeployments | View | Yes |
| Amazon API Gateway V2 | CreateRoute | Create | Yes |
| Amazon API Gateway V2 | GetRoutes | View | Yes |
| Amazon API Gateway V2 | UntagResource | Delete | Yes |
| Amazon API Gateway V2 | UpdateDomainName | Edit | Yes |
| Amazon API Gateway V2 | GetDomainName | View | Yes |
| Amazon API Gateway V2 | DeleteDomainName | Delete | Yes |
| Amazon API Gateway V2 | UpdateAuthorizer | Edit | Yes |
| Amazon API Gateway V2 | GetAuthorizer | View | Yes |
| Amazon API Gateway V2 | DeleteAuthorizer | Delete | Yes |
| Amazon API Gateway V2 | ExportApi | View | Yes |
| Amazon API Gateway V2 | DeleteAccessLogSettings | Delete | Yes |
| Amazon API Gateway V2 | UpdateModel | Edit | Yes |
| Amazon API Gateway V2 | GetModel | View | Yes |
| Amazon API Gateway V2 | DeleteModel | Delete | Yes |
| Amazon API Gateway V2 | GetModelTemplate | View | Yes |
| Amazon API Gateway V2 | UpdateRouteResponse | Edit | Yes |
| Amazon API Gateway V2 | GetRouteResponse | View | Yes |
| Amazon API Gateway V2 | DeleteRouteResponse | Delete | Yes |
| Amazon API Gateway V2 | UpdateStage | Edit | Yes |
| Amazon API Gateway V2 | GetStage | View | Yes |
| Amazon API Gateway V2 | DeleteStage | Delete | Yes |
| Amazon API Gateway V2 | UpdateApiMapping | Edit | Yes |
| Amazon API Gateway V2 | GetApiMapping | View | Yes |
| Amazon API Gateway V2 | DeleteApiMapping | Delete | Yes |
| Amazon API Gateway V2 | CreateModel | Create | Yes |
| Amazon API Gateway V2 | GetModels | View | Yes |
| Amazon API Gateway V2 | ResetAuthorizersCache | Delete | Yes |
| Amazon API Gateway V2 | UpdateDeployment | Edit | Yes |
| Amazon API Gateway V2 | GetDeployment | View | Yes |
| Amazon API Gateway V2 | DeleteDeployment | Delete | Yes |
| Amazon API Gateway V2 | UpdateRoute | Edit | Yes |
| Amazon API Gateway V2 | GetRoute | View | Yes |
| Amazon API Gateway V2 | DeleteRoute | Delete | Yes |
| Amazon API Gateway V2 | CreateDomainName | Create | Yes |
| Amazon API Gateway V2 | GetDomainNames | View | Yes |
| Amazon API Gateway V2 | DeleteRouteRequestParameter | Delete | Yes |
| Amazon API Gateway V2 | ImportApi | Create | Yes |
| Amazon API Gateway V2 | CreateApi | Create | Yes |
| Amazon API Gateway V2 | GetApis | View | Yes |
| Amazon API Gateway V2 | CreateStage | Create | Yes |
| Amazon API Gateway V2 | GetStages | View | Yes |
| Amazon API Gateway V2 | UpdateIntegrationResponse | Edit | Yes |
| Amazon API Gateway V2 | GetIntegrationResponse | View | Yes |
| Amazon API Gateway V2 | DeleteIntegrationResponse | Delete | Yes |
| Amazon API Gateway V2 | CreateAuthorizer | Create | Yes |
| Amazon API Gateway V2 | GetAuthorizers | View | Yes |
| Amazon API Gateway V2 | ReimportApi | Edit | Yes |
| Amazon API Gateway V2 | UpdateApi | Edit | Yes |
| Amazon API Gateway V2 | GetApi | View | Yes |
| Amazon API Gateway V2 | DeleteApi | Delete | Yes |
| Amazon API Gateway V2 | TagResource | Create | Yes |
| Amazon API Gateway V2 | GetTags | View | Yes |
| Amazon Auto Scaling | PutScheduledUpdateGroupAction | Edit | Yes |
| Amazon Auto Scaling | DisableMetricsCollection | Delete | Yes |
| Amazon Auto Scaling | SetDesiredCapacity | Create | Yes |
| Amazon Auto Scaling | DetachLoadBalancers | Delete | Yes |
| Amazon Auto Scaling | CancelInstanceRefresh | Delete | Yes |
| Amazon Auto Scaling | SetInstanceHealth | Create | Yes |
| Amazon Auto Scaling | SuspendProcesses | Delete | Yes |
| Amazon Auto Scaling | DescribeTags | View | Yes |
| Amazon Auto Scaling | AttachInstances | Attach | Yes |
| Amazon Auto Scaling | RecordLifecycleActionHeartbeat | Create | Yes |
| Amazon Auto Scaling | DescribeAccountLimits | View | Yes |
| Amazon Auto Scaling | DescribeAdjustmentTypes | View | Yes |
| Amazon Auto Scaling | EnableMetricsCollection | Enable | Yes |
| Amazon Auto Scaling | DescribeScalingProcessTypes | View | Yes |
| Amazon Auto Scaling | DeleteScheduledAction | Delete | Yes |
| Amazon Auto Scaling | TerminateInstanceInAutoScalingGroup | Terminate | Yes |
| Amazon Auto Scaling | PutLifecycleHook | Edit | Yes |
| Amazon Auto Scaling | CreateAutoScalingGroup | Create | Yes |
| Amazon Auto Scaling | SetInstanceProtection | Create | Yes |
| Amazon Auto Scaling | PutScalingPolicy | Edit | Yes |
| Amazon Auto Scaling | ExitStandby | Create | Yes |
| Amazon Auto Scaling | DescribeInstanceRefreshes | View | Yes |
| Amazon Auto Scaling | DescribeAutoScalingNotificationTypes | View | Yes |
| Amazon Auto Scaling | PutWarmPool | Edit | Yes |
| Amazon Auto Scaling | DescribeLoadBalancerTargetGroups | View | Yes |
| Amazon Auto Scaling | AttachLoadBalancers | Attach | Yes |
| Amazon Auto Scaling | CreateOrUpdateTags | Create | Yes |
| Amazon Auto Scaling | DeletePolicy | Delete | Yes |
| Amazon Auto Scaling | EnterStandby | Create | Yes |
| Amazon Auto Scaling | DeleteWarmPool | Delete | Yes |
| Amazon Auto Scaling | DescribeMetricCollectionTypes | View | Yes |
| Amazon Auto Scaling | DescribeAutoScalingGroups | View | Yes |
| Amazon Auto Scaling | DeleteAutoScalingGroup | Delete | Yes |
| Amazon Auto Scaling | DescribeLifecycleHooks | View | Yes |
| Amazon Auto Scaling | DetachInstances | Delete | Yes |
| Amazon Auto Scaling | DescribeWarmPool | View | Yes |
| Amazon Auto Scaling | DeleteTags | Delete | Yes |
| Amazon Auto Scaling | DescribeLifecycleHookTypes | View | Yes |
| Amazon Auto Scaling | DeleteLaunchConfiguration | Delete | Yes |
| Amazon Auto Scaling | DescribeLaunchConfigurations | View | Yes |
| Amazon Auto Scaling | DeleteNotificationConfiguration | Delete | Yes |
| Amazon Auto Scaling | PutNotificationConfiguration | Edit | Yes |
| Amazon Auto Scaling | DescribeNotificationConfigurations | View | Yes |
| Amazon Auto Scaling | DeleteLifecycleHook | Delete | Yes |
| Amazon Auto Scaling | DescribeScheduledActions | View | Yes |
| Amazon Auto Scaling | DescribeScalingActivities | View | Yes |
| Amazon Auto Scaling | DescribeTerminationPolicyTypes | View | Yes |
| Amazon Auto Scaling | DescribeAutoScalingInstances | View | Yes |
| Amazon Auto Scaling | UpdateAutoScalingGroup | Edit | Yes |
| Amazon Auto Scaling | CompleteLifecycleAction | Create | Yes |
| Amazon Auto Scaling | DescribeLoadBalancers | View | Yes |
| Amazon Auto Scaling | DescribePolicies | View | Yes |
| Amazon Auto Scaling | DetachLoadBalancerTargetGroups | Delete | Yes |
| Amazon Auto Scaling | ResumeProcesses | Create | Yes |
| Amazon Auto Scaling | CreateLaunchConfiguration | Create | Yes |
| Amazon Auto Scaling | ExecutePolicy | Create | Yes |
| Amazon Auto Scaling | StartInstanceRefresh | Start | Yes |
| Amazon Auto Scaling | AttachLoadBalancerTargetGroups | Attach | Yes |
| Amazon Certificate Manager | ListCertificates | View | Yes |
| Amazon Certificate Manager | PutAccountConfiguration | Edit | Yes |
| Amazon Certificate Manager | ExportCertificate | View | Yes |
| Amazon Certificate Manager | AddTagsToCertificate | Create | Yes |
| Amazon Certificate Manager | ResendValidationEmail | Create | Yes |
| Amazon Certificate Manager | RenewCertificate | Create | Yes |
| Amazon Certificate Manager | DescribeCertificate | View | Yes |
| Amazon Certificate Manager | ListTagsForCertificate | View | Yes |
| Amazon Certificate Manager | ImportCertificate | Create | Yes |
| Amazon Certificate Manager | RequestCertificate | Create | Yes |
| Amazon Certificate Manager | DeleteCertificate | Delete | Yes |
| Amazon Certificate Manager | UpdateCertificateOptions | Edit | Yes |
| Amazon Certificate Manager | GetCertificate | View | Yes |
| Amazon Certificate Manager | GetAccountConfiguration | View | Yes |
| Amazon Certificate Manager | RemoveTagsFromCertificate | Delete | Yes |
| Amazon CloudFormation | ExecuteChangeSet | Create | Yes |
| Amazon CloudFormation | DetectStackResourceDrift | Create | Yes |
| Amazon CloudFormation | DescribeStackResourceDrifts | View | Yes |
| Amazon CloudFormation | DetectStackDrift | Create | Yes |
| Amazon CloudFormation | DeleteStack | Delete | Yes |
| Amazon CloudFormation | UpdateStack | Edit | Yes |
| Amazon CloudFormation | DescribeTypeRegistration | View | Yes |
| Amazon CloudFormation | ValidateTemplate | Create | Yes |
| Amazon CloudFormation | ListStackSets | View | Yes |
| Amazon CloudFormation | SetStackPolicy | Create | Yes |
| Amazon CloudFormation | DescribeStackSetOperation | View | Yes |
| Amazon CloudFormation | GetStackPolicy | View | Yes |
| Amazon CloudFormation | DescribeAccountLimits | View | Yes |
| Amazon CloudFormation | RegisterType | Register | Yes |
| Amazon CloudFormation | DeleteChangeSet | Delete | Yes |
| Amazon CloudFormation | DescribeStackResources | View | Yes |
| Amazon CloudFormation | UpdateStackInstances | Edit | Yes |
| Amazon CloudFormation | StopStackSetOperation | Stop | Yes |
| Amazon CloudFormation | ListStackResources | View | Yes |
| Amazon CloudFormation | GetTemplate | View | Yes |
| Amazon CloudFormation | SignalResource | Create | Yes |
| Amazon CloudFormation | EstimateTemplateCost | Create | Yes |
| Amazon CloudFormation | ListStackSetOperations | View | Yes |
| Amazon CloudFormation | ListTypeVersions | View | Yes |
| Amazon CloudFormation | DescribeStackEvents | View | Yes |
| Amazon CloudFormation | ListStacks | View | Yes |
| Amazon CloudFormation | RecordHandlerProgress | Create | Yes |
| Amazon CloudFormation | ListTypes | View | Yes |
| Amazon CloudFormation | DescribeChangeSet | View | Yes |
| Amazon CloudFormation | ListImports | View | Yes |
| Amazon CloudFormation | CreateStackSet | Create | Yes |
| Amazon CloudFormation | DeleteStackSet | Delete | Yes |
| Amazon CloudFormation | UpdateStackSet | Edit | Yes |
| Amazon CloudFormation | DescribeStacks | View | Yes |
| Amazon CloudFormation | CreateChangeSet | Create | Yes |
| Amazon CloudFormation | CreateStackInstances | Create | Yes |
| Amazon CloudFormation | CancelUpdateStack | Delete | Yes |
| Amazon CloudFormation | DescribeStackDriftDetectionStatus | View | Yes |
| Amazon CloudFormation | UpdateTerminationProtection | Edit | Yes |
| Amazon CloudFormation | SetTypeDefaultVersion | Create | Yes |
| Amazon CloudFormation | DescribeStackResource | View | Yes |
| Amazon CloudFormation | ListStackSetOperationResults | View | Yes |
| Amazon CloudFormation | ListChangeSets | View | Yes |
| Amazon CloudFormation | ContinueUpdateRollback | Create | Yes |
| Amazon CloudFormation | ListTypeRegistrations | View | Yes |
| Amazon CloudFormation | DeregisterType | Deregister | Yes |
| Amazon CloudFormation | CreateStack | Create | Yes |
| Amazon CloudFormation | ListExports | View | Yes |
| Amazon CloudFormation | ListStackInstances | View | Yes |
| Amazon CloudFormation | GetTemplateSummary | View | Yes |
| Amazon CloudFormation | DescribeType | View | Yes |
| Amazon CloudFormation | DetectStackSetDrift | Create | Yes |
| Amazon CloudFormation | DescribeStackInstance | View | Yes |
| Amazon CloudFormation | DeleteStackInstances | Delete | Yes |
| Amazon CloudFormation | DescribeStackSet | View | Yes |
| Amazon CloudFront | GetInvalidation | View | Yes |
| Amazon CloudFront | GetCachePolicyConfig | View | Yes |
| Amazon CloudFront | UpdateRealtimeLogConfig | Edit | Yes |
| Amazon CloudFront | GetRealtimeLogConfig | View | Yes |
| Amazon CloudFront | UpdateFieldLevelEncryptionConfig | Edit | Yes |
| Amazon CloudFront | GetFieldLevelEncryptionConfig | View | Yes |
| Amazon CloudFront | GetKeyGroupConfig | View | Yes |
| Amazon CloudFront | ListDistributionsByKeyGroup | View | Yes |
| Amazon CloudFront | ListDistributionsByWebACLId | View | Yes |
| Amazon CloudFront | UpdateFieldLevelEncryptionProfile | Edit | Yes |
| Amazon CloudFront | GetFieldLevelEncryptionProfileConfig | View | Yes |
| Amazon CloudFront | UpdateDistribution | Edit | Yes |
| Amazon CloudFront | GetDistributionConfig | View | Yes |
| Amazon CloudFront | UpdateCachePolicy | Edit | Yes |
| Amazon CloudFront | GetCachePolicy | View | Yes |
| Amazon CloudFront | DeleteCachePolicy | Delete | Yes |
| Amazon CloudFront | GetFieldLevelEncryption | View | Yes |
| Amazon CloudFront | DeleteFieldLevelEncryptionConfig | Delete | Yes |
| Amazon CloudFront | UpdateCloudFrontOriginAccessIdentity | Edit | Yes |
| Amazon CloudFront | GetCloudFrontOriginAccessIdentityConfig | View | Yes |
| Amazon CloudFront | CreateStreamingDistribution | Create | Yes |
| Amazon CloudFront | ListStreamingDistributions | View | Yes |
| Amazon CloudFront | GetFieldLevelEncryptionProfile | View | Yes |
| Amazon CloudFront | DeleteFieldLevelEncryptionProfile | Delete | Yes |
| Amazon CloudFront | ListDistributionsByCachePolicyId | View | Yes |
| Amazon CloudFront | CreatePublicKey | Create | Yes |
| Amazon CloudFront | ListPublicKeys | View | Yes |
| Amazon CloudFront | CreateRealtimeLogConfig | Create | Yes |
| Amazon CloudFront | ListRealtimeLogConfigs | View | Yes |
| Amazon CloudFront | UntagResource | Delete | Yes |
| Amazon CloudFront | UpdatePublicKey | Edit | Yes |
| Amazon CloudFront | GetPublicKeyConfig | View | Yes |
| Amazon CloudFront | TagResource | Create | Yes |
| Amazon CloudFront | UpdateOriginRequestPolicy | Edit | Yes |
| Amazon CloudFront | GetOriginRequestPolicy | View | Yes |
| Amazon CloudFront | DeleteOriginRequestPolicy | Delete | Yes |
| Amazon CloudFront | CreateOriginRequestPolicy | Create | Yes |
| Amazon CloudFront | ListOriginRequestPolicies | View | Yes |
| Amazon CloudFront | UpdateKeyGroup | Edit | Yes |
| Amazon CloudFront | GetKeyGroup | View | Yes |
| Amazon CloudFront | DeleteKeyGroup | Delete | Yes |
| Amazon CloudFront | CreateCloudFrontOriginAccessIdentity | Create | Yes |
| Amazon CloudFront | ListCloudFrontOriginAccessIdentities | View | Yes |
| Amazon CloudFront | GetDistribution | View | Yes |
| Amazon CloudFront | DeleteDistribution | Delete | Yes |
| Amazon CloudFront | ListDistributionsByRealtimeLogConfig | View | Yes |
| Amazon CloudFront | CreateKeyGroup | Create | Yes |
| Amazon CloudFront | ListKeyGroups | View | Yes |
| Amazon CloudFront | CreateInvalidation | Create | Yes |
| Amazon CloudFront | ListInvalidations | View | Yes |
| Amazon CloudFront | GetPublicKey | View | Yes |
| Amazon CloudFront | DeletePublicKey | Delete | Yes |
| Amazon CloudFront | ListTagsForResource | View | Yes |
| Amazon CloudFront | DeleteRealtimeLogConfig | Delete | Yes |
| Amazon CloudFront | CreateFieldLevelEncryptionConfig | Create | Yes |
| Amazon CloudFront | ListFieldLevelEncryptionConfigs | View | Yes |
| Amazon CloudFront | GetOriginRequestPolicyConfig | View | Yes |
| Amazon CloudFront | CreateStreamingDistributionWithTags | Create | Yes |
| Amazon CloudFront | CreateFieldLevelEncryptionProfile | Create | Yes |
| Amazon CloudFront | ListFieldLevelEncryptionProfiles | View | Yes |
| Amazon CloudFront | CreateDistributionWithTags | Create | Yes |
| Amazon CloudFront | CreateDistribution | Create | Yes |
| Amazon CloudFront | ListDistributions | View | Yes |
| Amazon CloudFront | CreateCachePolicy | Create | Yes |
| Amazon CloudFront | ListCachePolicies | View | Yes |
| Amazon CloudFront | ListDistributionsByOriginRequestPolicyId | View | Yes |
| Amazon CloudFront | UpdateStreamingDistribution | Edit | Yes |
| Amazon CloudFront | GetStreamingDistributionConfig | View | Yes |
| Amazon CloudFront | CreateMonitoringSubscription | Create | Yes |
| Amazon CloudFront | GetMonitoringSubscription | View | Yes |
| Amazon CloudFront | DeleteMonitoringSubscription | Delete | Yes |
| Amazon CloudFront | GetStreamingDistribution | View | Yes |
| Amazon CloudFront | DeleteStreamingDistribution | Delete | Yes |
| Amazon CloudFront | GetCloudFrontOriginAccessIdentity | View | Yes |
| Amazon CloudFront | DeleteCloudFrontOriginAccessIdentity | Delete | Yes |
| Amazon CloudSearch | DefineExpression | Create | Yes |
| Amazon CloudSearch | DeleteExpression | Delete | Yes |
| Amazon CloudSearch | DefineIndexField | Create | Yes |
| Amazon CloudSearch | ListDomainNames | View | Yes |
| Amazon CloudSearch | CreateDomain | Create | Yes |
| Amazon CloudSearch | DescribeExpressions | View | Yes |
| Amazon CloudSearch | DefineSuggester | Create | Yes |
| Amazon CloudSearch | DescribeAnalysisSchemes | View | Yes |
| Amazon CloudSearch | DeleteIndexField | Delete | Yes |
| Amazon CloudSearch | DescribeSuggesters | View | Yes |
| Amazon CloudSearch | DefineAnalysisScheme | Create | Yes |
| Amazon CloudSearch | UpdateDomainEndpointOptions | Edit | Yes |
| Amazon CloudSearch | IndexDocuments | Create | Yes |
| Amazon CloudSearch | DescribeDomainEndpointOptions | View | Yes |
| Amazon CloudSearch | UpdateAvailabilityOptions | Edit | Yes |
| Amazon CloudSearch | BuildSuggesters | Create | Yes |
| Amazon CloudSearch | UpdateScalingParameters | Edit | Yes |
| Amazon CloudSearch | DescribeAvailabilityOptions | View | Yes |
| Amazon CloudSearch | DeleteDomain | Delete | Yes |
| Amazon CloudSearch | DescribeServiceAccessPolicies | View | Yes |
| Amazon CloudSearch | DeleteSuggester | Delete | Yes |
| Amazon CloudSearch | DeleteAnalysisScheme | Delete | Yes |
| Amazon CloudSearch | DescribeIndexFields | View | Yes |
| Amazon CloudSearch | UpdateServiceAccessPolicies | Edit | Yes |
| Amazon CloudSearch | DescribeScalingParameters | View | Yes |
| Amazon CloudSearch | DescribeDomains | View | Yes |
| Amazon CloudTrail | AddTags | Create | Yes |
| Amazon CloudTrail | GetEventSelectors | View | Yes |
| Amazon CloudTrail | GetTrailStatus | View | Yes |
| Amazon CloudTrail | DescribeTrails | View | Yes |
| Amazon CloudTrail | PutEventSelectors | Edit | Yes |
| Amazon CloudTrail | StartLogging | Start | Yes |
| Amazon CloudTrail | CreateTrail | Create | Yes |
| Amazon CloudTrail | DeleteTrail | Delete | Yes |
| Amazon CloudTrail | LookupEvents | Create | Yes |
| Amazon CloudTrail | GetTrail | View | Yes |
| Amazon CloudTrail | GetInsightSelectors | View | Yes |
| Amazon CloudTrail | ListPublicKeys | View | Yes |
| Amazon CloudTrail | PutInsightSelectors | Edit | Yes |
| Amazon CloudTrail | RemoveTags | Delete | Yes |
| Amazon CloudTrail | UpdateTrail | Edit | Yes |
| Amazon CloudTrail | ListTags | View | Yes |
| Amazon CloudTrail | ListTrails | View | Yes |
| Amazon CloudTrail | StopLogging | Stop | Yes |
| Amazon CloudWatch | GetDashboard | View | Yes |
| Amazon CloudWatch | EnableAlarmActions | Enable | Yes |
| Amazon CloudWatch | DisableAlarmActions | Delete | Yes |
| Amazon CloudWatch | DescribeAlarmsForMetric | View | Yes |
| Amazon CloudWatch | ListTagsForResource | View | Yes |
| Amazon CloudWatch | PutAnomalyDetector | Edit | Yes |
| Amazon CloudWatch | DescribeAnomalyDetectors | View | Yes |
| Amazon CloudWatch | DeleteAnomalyDetector | Delete | Yes |
| Amazon CloudWatch | DescribeAlarms | View | Yes |
| Amazon CloudWatch | ListDashboards | View | Yes |
| Amazon CloudWatch | DeleteInsightRules | Delete | Yes |
| Amazon CloudWatch | GetMetricStream | View | Yes |
| Amazon CloudWatch | StopMetricStreams | Stop | Yes |
| Amazon CloudWatch | GetMetricWidgetImage | View | Yes |
| Amazon CloudWatch | PutMetricStream | Edit | Yes |
| Amazon CloudWatch | DescribeAlarmHistory | View | Yes |
| Amazon CloudWatch | GetMetricData | View | Yes |
| Amazon CloudWatch | DeleteDashboards | Delete | Yes |
| Amazon CloudWatch | PutCompositeAlarm | Edit | Yes |
| Amazon CloudWatch | PutInsightRule | Edit | Yes |
| Amazon CloudWatch | PutMetricAlarm | Edit | Yes |
| Amazon CloudWatch | PutDashboard | Edit | Yes |
| Amazon CloudWatch | StartMetricStreams | Start | Yes |
| Amazon CloudWatch | DeleteMetricStream | Delete | Yes |
| Amazon CloudWatch | UntagResource | Delete | Yes |
| Amazon CloudWatch | EnableInsightRules | Enable | Yes |
| Amazon CloudWatch | DescribeInsightRules | View | Yes |
| Amazon CloudWatch | SetAlarmState | Create | Yes |
| Amazon CloudWatch | GetInsightRuleReport | View | Yes |
| Amazon CloudWatch | GetMetricStatistics | View | Yes |
| Amazon CloudWatch | TagResource | Create | Yes |
| Amazon CloudWatch | PutMetricData | Edit | Yes |
| Amazon CloudWatch | DisableInsightRules | Delete | Yes |
| Amazon CloudWatch | DeleteAlarms | Delete | Yes |
| Amazon CloudWatch | ListMetricStreams | View | Yes |
| Amazon CloudWatch | ListMetrics | View | Yes |
| Amazon CloudWatch Application Insights | DescribeComponent | View | Yes |
| Amazon CloudWatch Application Insights | ListLogPatternSets | View | Yes |
| Amazon CloudWatch Application Insights | UntagResource | Delete | Yes |
| Amazon CloudWatch Application Insights | DescribeLogPattern | View | Yes |
| Amazon CloudWatch Application Insights | CreateComponent | Create | Yes |
| Amazon CloudWatch Application Insights | DescribeComponentConfigurationRecommendation | View | Yes |
| Amazon CloudWatch Application Insights | UpdateComponentConfiguration | Edit | Yes |
| Amazon CloudWatch Application Insights | ListConfigurationHistory | View | Yes |
| Amazon CloudWatch Application Insights | DescribeProblem | View | Yes |
| Amazon CloudWatch Application Insights | ListProblems | View | Yes |
| Amazon CloudWatch Application Insights | CreateLogPattern | Create | Yes |
| Amazon CloudWatch Application Insights | DescribeObservation | View | Yes |
| Amazon CloudWatch Application Insights | ListTagsForResource | View | Yes |
| Amazon CloudWatch Application Insights | ListApplications | View | Yes |
| Amazon CloudWatch Application Insights | DeleteApplication | Delete | Yes |
| Amazon CloudWatch Application Insights | DeleteComponent | Delete | Yes |
| Amazon CloudWatch Application Insights | DeleteLogPattern | Delete | Yes |
| Amazon CloudWatch Application Insights | CreateApplication | Create | Yes |
| Amazon CloudWatch Application Insights | ListComponents | View | Yes |
| Amazon CloudWatch Application Insights | TagResource | Create | Yes |
| Amazon CloudWatch Application Insights | DescribeApplication | View | Yes |
| Amazon CloudWatch Application Insights | DescribeProblemObservations | View | Yes |
| Amazon CloudWatch Application Insights | UpdateApplication | Edit | Yes |
| Amazon CloudWatch Application Insights | UpdateComponent | Edit | Yes |
| Amazon CloudWatch Application Insights | DescribeComponentConfiguration | View | Yes |
| Amazon CloudWatch Application Insights | ListLogPatterns | View | Yes |
| Amazon CloudWatch Application Insights | UpdateLogPattern | Edit | Yes |
| Amazon CloudWatch Events | DeletePartnerEventSource | Delete | Yes |
| Amazon CloudWatch Events | EnableRule | Enable | Yes |
| Amazon CloudWatch Events | DescribeArchive | View | Yes |
| Amazon CloudWatch Events | PutPartnerEvents | Edit | Yes |
| Amazon CloudWatch Events | UntagResource | Delete | Yes |
| Amazon CloudWatch Events | DescribeConnection | View | Yes |
| Amazon CloudWatch Events | PutPermission | Edit | Yes |
| Amazon CloudWatch Events | ListPartnerEventSources | View | Yes |
| Amazon CloudWatch Events | ListTargetsByRule | View | Yes |
| Amazon CloudWatch Events | TestEventPattern | Create | Yes |
| Amazon CloudWatch Events | DescribeRule | View | Yes |
| Amazon CloudWatch Events | ListRuleNamesByTarget | View | Yes |
| Amazon CloudWatch Events | ListEventSources | View | Yes |
| Amazon CloudWatch Events | DeauthorizeConnection | Create | Yes |
| Amazon CloudWatch Events | CreateApiDestination | Create | Yes |
| Amazon CloudWatch Events | CancelReplay | Delete | Yes |
| Amazon CloudWatch Events | RemovePermission | Delete | Yes |
| Amazon CloudWatch Events | DeleteEventBus | Delete | Yes |
| Amazon CloudWatch Events | DeleteConnection | Delete | Yes |
| Amazon CloudWatch Events | DeactivateEventSource | Deactivate | Yes |
| Amazon CloudWatch Events | RemoveTargets | Delete | Yes |
| Amazon CloudWatch Events | DeleteRule | Delete | Yes |
| Amazon CloudWatch Events | UpdateArchive | Edit | Yes |
| Amazon CloudWatch Events | DescribeApiDestination | View | Yes |
| Amazon CloudWatch Events | DescribeReplay | View | Yes |
| Amazon CloudWatch Events | ListRules | View | Yes |
| Amazon CloudWatch Events | ListArchives | View | Yes |
| Amazon CloudWatch Events | CreateEventBus | Create | Yes |
| Amazon CloudWatch Events | ListEventBuses | View | Yes |
| Amazon CloudWatch Events | PutRule | Edit | Yes |
| Amazon CloudWatch Events | CreateArchive | Create | Yes |
| Amazon CloudWatch Events | ListTagsForResource | View | Yes |
| Amazon CloudWatch Events | UpdateApiDestination | Edit | Yes |
| Amazon CloudWatch Events | DeleteApiDestination | Delete | Yes |
| Amazon CloudWatch Events | ListPartnerEventSourceAccounts | View | Yes |
| Amazon CloudWatch Events | DisableRule | Delete | Yes |
| Amazon CloudWatch Events | TagResource | Create | Yes |
| Amazon CloudWatch Events | CreateConnection | Create | Yes |
| Amazon CloudWatch Events | DescribeEventSource | View | Yes |
| Amazon CloudWatch Events | DeleteArchive | Delete | Yes |
| Amazon CloudWatch Events | CreatePartnerEventSource | Create | Yes |
| Amazon CloudWatch Events | StartReplay | Start | Yes |
| Amazon CloudWatch Events | UpdateConnection | Edit | Yes |
| Amazon CloudWatch Events | ListApiDestinations | View | Yes |
| Amazon CloudWatch Events | DescribeEventBus | View | Yes |
| Amazon CloudWatch Events | DescribePartnerEventSource | View | Yes |
| Amazon CloudWatch Events | PutTargets | Edit | Yes |
| Amazon CloudWatch Events | ListReplays | View | Yes |
| Amazon CloudWatch Events | ActivateEventSource | Activate | Yes |
| Amazon CloudWatch Events | PutEvents | Edit | Yes |
| Amazon CloudWatch Events | ListConnections | View | Yes |
| Amazon CloudWatch Logs | DescribeResourcePolicies | View | Yes |
| Amazon CloudWatch Logs | PutSubscriptionFilter | Edit | Yes |
| Amazon CloudWatch Logs | FilterLogEvents | Create | Yes |
| Amazon CloudWatch Logs | PutRetentionPolicy | Edit | Yes |
| Amazon CloudWatch Logs | DeleteRetentionPolicy | Delete | Yes |
| Amazon CloudWatch Logs | GetQueryResults | View | Yes |
| Amazon CloudWatch Logs | DescribeQueryDefinitions | View | Yes |
| Amazon CloudWatch Logs | DeleteDestination | Delete | Yes |
| Amazon CloudWatch Logs | TagLogGroup | Create | Yes |
| Amazon CloudWatch Logs | DescribeQueries | View | Yes |
| Amazon CloudWatch Logs | DisassociateKmsKey | Delete | Yes |
| Amazon CloudWatch Logs | DeleteQueryDefinition | Delete | Yes |
| Amazon CloudWatch Logs | StartQuery | Start | Yes |
| Amazon CloudWatch Logs | CreateExportTask | Create | Yes |
| Amazon CloudWatch Logs | DescribeLogGroups | View | Yes |
| Amazon CloudWatch Logs | AssociateKmsKey | Create | Yes |
| Amazon CloudWatch Logs | CreateLogGroup | Create | Yes |
| Amazon CloudWatch Logs | PutQueryDefinition | Edit | Yes |
| Amazon CloudWatch Logs | CancelExportTask | Delete | Yes |
| Amazon CloudWatch Logs | DeleteMetricFilter | Delete | Yes |
| Amazon CloudWatch Logs | DeleteSubscriptionFilter | Delete | Yes |
| Amazon CloudWatch Logs | DescribeLogStreams | View | Yes |
| Amazon CloudWatch Logs | StopQuery | Stop | Yes |
| Amazon CloudWatch Logs | GetLogEvents | View | Yes |
| Amazon CloudWatch Logs | PutLogEvents | Edit | Yes |
| Amazon CloudWatch Logs | UntagLogGroup | Delete | Yes |
| Amazon CloudWatch Logs | DescribeDestinations | View | Yes |
| Amazon CloudWatch Logs | DeleteResourcePolicy | Delete | Yes |
| Amazon CloudWatch Logs | DescribeExportTasks | View | Yes |
| Amazon CloudWatch Logs | TestMetricFilter | Create | Yes |
| Amazon CloudWatch Logs | CreateLogStream | Create | Yes |
| Amazon CloudWatch Logs | ListTagsLogGroup | View | Yes |
| Amazon CloudWatch Logs | DeleteLogStream | Delete | Yes |
| Amazon CloudWatch Logs | DescribeSubscriptionFilters | View | Yes |
| Amazon CloudWatch Logs | PutDestinationPolicy | Edit | Yes |
| Amazon CloudWatch Logs | PutResourcePolicy | Edit | Yes |
| Amazon CloudWatch Logs | PutMetricFilter | Edit | Yes |
| Amazon CloudWatch Logs | PutDestination | Edit | Yes |
| Amazon CloudWatch Logs | DeleteLogGroup | Delete | Yes |
| Amazon CloudWatch Logs | GetLogGroupFields | View | Yes |
| Amazon CloudWatch Logs | DescribeMetricFilters | View | Yes |
| Amazon CloudWatch Logs | GetLogRecord | View | Yes |
| Amazon Database Migration Service | RefreshSchemas | Create | Yes |
| Amazon Database Migration Service | StartReplicationTaskAssessmentRun | Start | Yes |
| Amazon Database Migration Service | CancelReplicationTaskAssessmentRun | Delete | Yes |
| Amazon Database Migration Service | MoveReplicationTask | Move | Yes |
| Amazon Database Migration Service | DescribeReplicationTaskAssessmentResults | View | Yes |
| Amazon Database Migration Service | ImportCertificate | Create | Yes |
| Amazon Database Migration Service | DescribeReplicationInstances | View | Yes |
| Amazon Database Migration Service | DescribeEndpoints | View | Yes |
| Amazon Database Migration Service | DescribeReplicationTaskIndividualAssessments | View | Yes |
| Amazon Database Migration Service | DeleteReplicationInstance | Delete | Yes |
| Amazon Database Migration Service | DeleteConnection | Delete | Yes |
| Amazon Database Migration Service | DescribeEndpointSettings | View | Yes |
| Amazon Database Migration Service | DescribeCertificates | View | Yes |
| Amazon Database Migration Service | DescribeReplicationInstanceTaskLogs | View | Yes |
| Amazon Database Migration Service | DeleteEndpoint | Delete | Yes |
| Amazon Database Migration Service | CreateReplicationInstance | Create | Yes |
| Amazon Database Migration Service | DescribeEventCategories | View | Yes |
| Amazon Database Migration Service | ListTagsForResource | View | Yes |
| Amazon Database Migration Service | DescribeEventSubscriptions | View | Yes |
| Amazon Database Migration Service | DescribeRefreshSchemasStatus | View | Yes |
| Amazon Database Migration Service | RebootReplicationInstance | Reboot | Yes |
| Amazon Database Migration Service | ModifyReplicationTask | Edit | Yes |
| Amazon Database Migration Service | CreateReplicationSubnetGroup | Create | Yes |
| Amazon Database Migration Service | StartReplicationTask | Start | Yes |
| Amazon Database Migration Service | StopReplicationTask | Stop | Yes |
| Amazon Database Migration Service | DescribeReplicationTasks | View | Yes |
| Amazon Database Migration Service | DeleteReplicationTask | Delete | Yes |
| Amazon Database Migration Service | ModifyEndpoint | Edit | Yes |
| Amazon Database Migration Service | StartReplicationTaskAssessment | Start | Yes |
| Amazon Database Migration Service | DescribeTableStatistics | View | Yes |
| Amazon Database Migration Service | DescribeAccountAttributes | View | Yes |
| Amazon Database Migration Service | DescribeEvents | View | Yes |
| Amazon Database Migration Service | DeleteCertificate | Delete | Yes |
| Amazon Database Migration Service | RemoveTagsFromResource | Delete | Yes |
| Amazon Database Migration Service | DeleteReplicationSubnetGroup | Delete | Yes |
| Amazon Database Migration Service | AddTagsToResource | Create | Yes |
| Amazon Database Migration Service | ReloadTables | Create | Yes |
| Amazon Database Migration Service | TestConnection | Create | Yes |
| Amazon Database Migration Service | DeleteEventSubscription | Delete | Yes |
| Amazon Database Migration Service | DescribeSchemas | View | Yes |
| Amazon Database Migration Service | ModifyReplicationSubnetGroup | Edit | Yes |
| Amazon Database Migration Service | DescribeReplicationSubnetGroups | View | Yes |
| Amazon Database Migration Service | DeleteReplicationTaskAssessmentRun | Delete | Yes |
| Amazon Database Migration Service | DescribeOrderableReplicationInstances | View | Yes |
| Amazon Database Migration Service | CreateEventSubscription | Create | Yes |
| Amazon Database Migration Service | DescribeApplicableIndividualAssessments | View | Yes |
| Amazon Database Migration Service | CreateEndpoint | Create | Yes |
| Amazon Database Migration Service | DescribeConnections | View | Yes |
| Amazon Database Migration Service | DescribeReplicationTaskAssessmentRuns | View | Yes |
| Amazon Database Migration Service | ModifyReplicationInstance | Edit | Yes |
| Amazon Database Migration Service | DescribeEndpointTypes | View | Yes |
| Amazon Database Migration Service | CreateReplicationTask | Create | Yes |
| Amazon Database Migration Service | DescribePendingMaintenanceActions | View | Yes |
| Amazon Database Migration Service | ApplyPendingMaintenanceAction | Edit | Yes |
| Amazon Database Migration Service | ModifyEventSubscription | Edit | Yes |
| Amazon Direct Connect | CreatePublicVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeLags | View | Yes |
| Amazon Direct Connect | DeleteDirectConnectGatewayAssociation | Delete | Yes |
| Amazon Direct Connect | AllocatePublicVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeConnectionLoa | View | Yes |
| Amazon Direct Connect | DeleteConnection | Delete | Yes |
| Amazon Direct Connect | CreateLag | Create | Yes |
| Amazon Direct Connect | DescribeVirtualGateways | View | Yes |
| Amazon Direct Connect | DescribeVirtualInterfaces | View | Yes |
| Amazon Direct Connect | DescribeDirectConnectGatewayAssociationProposals | View | Yes |
| Amazon Direct Connect | DescribeDirectConnectGatewayAssociations | View | Yes |
| Amazon Direct Connect | CreateDirectConnectGatewayAssociation | Create | Yes |
| Amazon Direct Connect | DescribeDirectConnectGateways | View | Yes |
| Amazon Direct Connect | DescribeTags | View | Yes |
| Amazon Direct Connect | DeleteBGPPeer | Delete | Yes |
| Amazon Direct Connect | StartBgpFailoverTest | Start | Yes |
| Amazon Direct Connect | DescribeConnectionsOnInterconnect | View | Yes |
| Amazon Direct Connect | ListVirtualInterfaceTestHistory | View | Yes |
| Amazon Direct Connect | AssociateHostedConnection | Create | Yes |
| Amazon Direct Connect | AcceptDirectConnectGatewayAssociationProposal | Approve | Yes |
| Amazon Direct Connect | UntagResource | Delete | Yes |
| Amazon Direct Connect | DisassociateConnectionFromLag | Delete | Yes |
| Amazon Direct Connect | DescribeLocations | View | Yes |
| Amazon Direct Connect | UpdateDirectConnectGatewayAssociation | Edit | Yes |
| Amazon Direct Connect | AllocateTransitVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeDirectConnectGatewayAttachments | View | Yes |
| Amazon Direct Connect | CreateDirectConnectGatewayAssociationProposal | Create | Yes |
| Amazon Direct Connect | CreateConnection | Create | Yes |
| Amazon Direct Connect | ConfirmPublicVirtualInterface | Create | Yes |
| Amazon Direct Connect | ConfirmPrivateVirtualInterface | Create | Yes |
| Amazon Direct Connect | UpdateConnection | Edit | Yes |
| Amazon Direct Connect | DescribeConnections | View | Yes |
| Amazon Direct Connect | DeleteVirtualInterface | Delete | Yes |
| Amazon Direct Connect | UpdateLag | Edit | Yes |
| Amazon Direct Connect | ConfirmTransitVirtualInterface | Create | Yes |
| Amazon Direct Connect | AllocateConnectionOnInterconnect | Create | Yes |
| Amazon Direct Connect | CreateBGPPeer | Create | Yes |
| Amazon Direct Connect | DeleteInterconnect | Delete | Yes |
| Amazon Direct Connect | DescribeInterconnectLoa | View | Yes |
| Amazon Direct Connect | DeleteDirectConnectGatewayAssociationProposal | Delete | Yes |
| Amazon Direct Connect | AssociateMacSecKey | Create | Yes |
| Amazon Direct Connect | CreateTransitVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeInterconnects | View | Yes |
| Amazon Direct Connect | AllocateHostedConnection | Create | Yes |
| Amazon Direct Connect | AssociateConnectionWithLag | Create | Yes |
| Amazon Direct Connect | ConfirmConnection | Create | Yes |
| Amazon Direct Connect | StopBgpFailoverTest | Stop | Yes |
| Amazon Direct Connect | CreateDirectConnectGateway | Create | Yes |
| Amazon Direct Connect | DeleteDirectConnectGateway | Delete | Yes |
| Amazon Direct Connect | DisassociateMacSecKey | Delete | Yes |
| Amazon Direct Connect | AllocatePrivateVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeHostedConnections | View | Yes |
| Amazon Direct Connect | DeleteLag | Delete | Yes |
| Amazon Direct Connect | CreateInterconnect | Create | Yes |
| Amazon Direct Connect | DescribeLoa | View | Yes |
| Amazon Direct Connect | AssociateVirtualInterface | Create | Yes |
| Amazon Direct Connect | CreatePrivateVirtualInterface | Create | Yes |
| Amazon Direct Connect | TagResource | Create | Yes |
| Amazon Direct Connect | UpdateVirtualInterfaceAttributes | Edit | Yes |
| Amazon Directory Service | UpdateRadius | Edit | Yes |
| Amazon Directory Service | DescribeEventTopics | View | Yes |
| Amazon Directory Service | DescribeLDAPSSettings | View | Yes |
| Amazon Directory Service | DisableLDAPS | Delete | Yes |
| Amazon Directory Service | ListTagsForResource | View | Yes |
| Amazon Directory Service | EnableRadius | Enable | Yes |
| Amazon Directory Service | AcceptSharedDirectory | Approve | Yes |
| Amazon Directory Service | AddTagsToResource | Create | Yes |
| Amazon Directory Service | EnableSso | Enable | Yes |
| Amazon Directory Service | UnshareDirectory | Create | Yes |
| Amazon Directory Service | VerifyTrust | Create | Yes |
| Amazon Directory Service | RegisterEventTopic | Register | Yes |
| Amazon Directory Service | DeleteTrust | Delete | Yes |
| Amazon Directory Service | DeleteDirectory | Delete | Yes |
| Amazon Directory Service | ListSchemaExtensions | View | Yes |
| Amazon Directory Service | AddRegion | Create | Yes |
| Amazon Directory Service | EnableClientAuthentication | Enable | Yes |
| Amazon Directory Service | DescribeCertificate | View | Yes |
| Amazon Directory Service | ListLogSubscriptions | View | Yes |
| Amazon Directory Service | DeregisterEventTopic | Deregister | Yes |
| Amazon Directory Service | RejectSharedDirectory | Reject | Yes |
| Amazon Directory Service | RegisterCertificate | Register | Yes |
| Amazon Directory Service | UpdateConditionalForwarder | Edit | Yes |
| Amazon Directory Service | ListIpRoutes | View | Yes |
| Amazon Directory Service | DisableSso | Delete | Yes |
| Amazon Directory Service | RemoveRegion | Delete | Yes |
| Amazon Directory Service | DescribeSnapshots | View | Yes |
| Amazon Directory Service | DeleteLogSubscription | Delete | Yes |
| Amazon Directory Service | ListCertificates | View | Yes |
| Amazon Directory Service | CreateSnapshot | Create | Yes |
| Amazon Directory Service | DescribeRegions | View | Yes |
| Amazon Directory Service | RemoveTagsFromResource | Delete | Yes |
| Amazon Directory Service | DescribeDomainControllers | View | Yes |
| Amazon Directory Service | EnableLDAPS | Enable | Yes |
| Amazon Directory Service | UpdateNumberOfDomainControllers | Edit | Yes |
| Amazon Directory Service | DisableRadius | Delete | Yes |
| Amazon Directory Service | DescribeSharedDirectories | View | Yes |
| Amazon Directory Service | AddIpRoutes | Create | Yes |
| Amazon Directory Service | CreateMicrosoftAD | Create | Yes |
| Amazon Directory Service | RemoveIpRoutes | Delete | Yes |
| Amazon Directory Service | CancelSchemaExtension | Delete | Yes |
| Amazon Directory Service | DisableClientAuthentication | Delete | Yes |
| Amazon Directory Service | GetSnapshotLimits | View | Yes |
| Amazon Directory Service | DescribeConditionalForwarders | View | Yes |
| Amazon Directory Service | StartSchemaExtension | Start | Yes |
| Amazon Directory Service | ShareDirectory | Create | Yes |
| Amazon Directory Service | DescribeDirectories | View | Yes |
| Amazon Directory Service | DescribeTrusts | View | Yes |
| Amazon Directory Service | DeleteSnapshot | Delete | Yes |
| Amazon Directory Service | CreateConditionalForwarder | Create | Yes |
| Amazon Directory Service | UpdateTrust | Edit | Yes |
| Amazon Directory Service | ResetUserPassword | Edit | Yes |
| Amazon Directory Service | ConnectDirectory | Create | Yes |
| Amazon Directory Service | CreateLogSubscription | Create | Yes |
| Amazon Directory Service | CreateComputer | Create | Yes |
| Amazon Directory Service | RestoreFromSnapshot | Create | Yes |
| Amazon Directory Service | GetDirectoryLimits | View | Yes |
| Amazon Directory Service | DeregisterCertificate | Deregister | Yes |
| Amazon Directory Service | CreateTrust | Create | Yes |
| Amazon Directory Service | DeleteConditionalForwarder | Delete | Yes |
| Amazon Directory Service | CreateDirectory | Create | Yes |
| Amazon Directory Service | CreateAlias | Create | Yes |
| Amazon DynamoDB | UpdateTableReplicaAutoScaling | Edit | Yes |
| Amazon DynamoDB | UpdateContributorInsights | Edit | Yes |
| Amazon DynamoDB | DescribeContributorInsights | View | Yes |
| Amazon DynamoDB | Query | Create | Yes |
| Amazon DynamoDB | CreateTable | Create | Yes |
| Amazon DynamoDB | UpdateContinuousBackups | Edit | Yes |
| Amazon DynamoDB | RestoreTableToPointInTime | Create | Yes |
| Amazon DynamoDB | ListContributorInsights | View | Yes |
| Amazon DynamoDB | DescribeEndpoints | View | Yes |
| Amazon DynamoDB | DescribeTimeToLive | View | Yes |
| Amazon DynamoDB | ExecuteStatement | Create | Yes |
| Amazon DynamoDB | TagResource | Create | Yes |
| Amazon DynamoDB | ExportTableToPointInTime | View | Yes |
| Amazon DynamoDB | DisableKinesisStreamingDestination | Delete | Yes |
| Amazon DynamoDB | CreateBackup | Create | Yes |
| Amazon DynamoDB | DeleteBackup | Delete | Yes |
| Amazon DynamoDB | TransactGetItems | Create | Yes |
| Amazon DynamoDB | DescribeGlobalTable | View | Yes |
| Amazon DynamoDB | DeleteItem | Delete | Yes |
| Amazon DynamoDB | TransactWriteItems | Create | Yes |
| Amazon DynamoDB | DescribeTable | View | Yes |
| Amazon DynamoDB | DescribeLimits | View | Yes |
| Amazon DynamoDB | ListTagsOfResource | View | Yes |
| Amazon DynamoDB | EnableKinesisStreamingDestination | Enable | Yes |
| Amazon DynamoDB | DescribeGlobalTableSettings | View | Yes |
| Amazon DynamoDB | UpdateTimeToLive | Edit | Yes |
| Amazon DynamoDB | ListExports | View | Yes |
| Amazon DynamoDB | DescribeKinesisStreamingDestination | View | Yes |
| Amazon DynamoDB | ListTables | View | Yes |
| Amazon DynamoDB | ListBackups | View | Yes |
| Amazon DynamoDB | DescribeBackup | View | Yes |
| Amazon DynamoDB | UpdateItem | Edit | Yes |
| Amazon DynamoDB | Scan | Create | Yes |
| Amazon DynamoDB | DescribeTableReplicaAutoScaling | View | Yes |
| Amazon DynamoDB | DeleteTable | Delete | Yes |
| Amazon DynamoDB | CreateGlobalTable | Create | Yes |
| Amazon DynamoDB | GetItem | View | Yes |
| Amazon DynamoDB | UntagResource | Delete | Yes |
| Amazon DynamoDB | UpdateGlobalTableSettings | Edit | Yes |
| Amazon DynamoDB | UpdateTable | Edit | Yes |
| Amazon DynamoDB | DescribeExport | View | Yes |
| Amazon DynamoDB | ListGlobalTables | View | Yes |
| Amazon DynamoDB | RestoreTableFromBackup | Create | Yes |
| Amazon DynamoDB | ExecuteTransaction | Create | Yes |
| Amazon DynamoDB | PutItem | Edit | Yes |
| Amazon DynamoDB | WriteItem | Create | Yes |
| Amazon DynamoDB | UpdateGlobalTable | Edit | Yes |
| Amazon DynamoDB | DescribeContinuousBackups | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | DecreaseReplicationFactor | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeClusters | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | RebootNode | Reboot | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeEvents | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | CreateParameterGroup | Create | Yes |
| Amazon DynamoDB Accelerator (DAX) | CreateCluster | Create | Yes |
| Amazon DynamoDB Accelerator (DAX) | IncreaseReplicationFactor | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | UpdateSubnetGroup | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeParameterGroups | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | DeleteSubnetGroup | Delete | Yes |
| Amazon DynamoDB Accelerator (DAX) | UpdateCluster | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | DeleteCluster | Delete | Yes |
| Amazon DynamoDB Accelerator (DAX) | TagResource | Create | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeSubnetGroups | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | ListTags | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | DeleteParameterGroup | Delete | Yes |
| Amazon DynamoDB Accelerator (DAX) | UntagResource | Delete | Yes |
| Amazon DynamoDB Accelerator (DAX) | UpdateParameterGroup | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeParameters | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeDefaultParameters | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | CreateSubnetGroup | Create | Yes |
| Amazon DynamoDB Streams | ListStreams | View | Yes |
| Amazon DynamoDB Streams | DescribeStream | View | Yes |
| Amazon DynamoDB Streams | GetShardIterator | View | Yes |
| Amazon DynamoDB Streams | GetRecords | View | Yes |
| Amazon EC2 | CreateRoute | Create | Yes |
| Amazon EC2 | RejectTransitGatewayVpcAttachment | Reject | Yes |
| Amazon EC2 | RegisterTransitGatewayMulticastGroupSources | Register | Yes |
| Amazon EC2 | GetTransitGatewayRouteTableAssociations | View | Yes |
| Amazon EC2 | AssignPrivateIpAddresses | Create | Yes |
| Amazon EC2 | CancelSpotInstanceRequests | Delete | Yes |
| Amazon EC2 | UnmonitorInstances | Edit | Yes |
| Amazon EC2 | DeleteVpnConnection | Delete | Yes |
| Amazon EC2 | ModifyManagedPrefixList | Edit | Yes |
| Amazon EC2 | CopySnapshot | Copy | Yes |
| Amazon EC2 | DeregisterImage | Deregister | Yes |
| Amazon EC2 | DeleteTrafficMirrorSession | Delete | Yes |
| Amazon EC2 | EnableVpcClassicLink | Enable | Yes |
| Amazon EC2 | CreateNetworkInterface | Create | Yes |
| Amazon EC2 | DisableEbsEncryptionByDefault | Delete | Yes |
| Amazon EC2 | DescribeVpcClassicLinkDnsSupport | View | Yes |
| Amazon EC2 | DeleteTags | Delete | Yes |
| Amazon EC2 | CreateTrafficMirrorFilterRule | Create | Yes |
| Amazon EC2 | CreateCustomerGateway | Create | Yes |
| Amazon EC2 | DescribePrincipalIdFormat | View | Yes |
| Amazon EC2 | DescribeVpcs | View | Yes |
| Amazon EC2 | CreateLaunchTemplate | Create | Yes |
| Amazon EC2 | DeleteSpotDatafeedSubscription | Delete | Yes |
| Amazon EC2 | CreateTags | Create | Yes |
| Amazon EC2 | ModifyVpnConnection | Edit | Yes |
| Amazon EC2 | ConfirmProductInstance | Create | Yes |
| Amazon EC2 | DescribeVpnConnections | View | Yes |
| Amazon EC2 | MoveAddressToVpc | Move | Yes |
| Amazon EC2 | DescribeNetworkInterfaceAttribute | View | Yes |
| Amazon EC2 | ModifyVpcPeeringConnectionOptions | Edit | Yes |
| Amazon EC2 | DescribeSpotPriceHistory | View | Yes |
| Amazon EC2 | ExportImage | View | Yes |
| Amazon EC2 | ModifyTransitGateway | Edit | Yes |
| Amazon EC2 | DisassociateEnclaveCertificateIamRole | Delete | Yes |
| Amazon EC2 | CreateClientVpnEndpoint | Create | Yes |
| Amazon EC2 | AttachNetworkInterface | Attach | Yes |
| Amazon EC2 | CancelImportTask | Delete | Yes |
| Amazon EC2 | DeleteQueuedReservedInstances | Delete | Yes |
| Amazon EC2 | DisassociateSubnetCidrBlock | Delete | Yes |
| Amazon EC2 | DescribeVpcAttribute | View | Yes |
| Amazon EC2 | CreateVpcEndpointServiceConfiguration | Create | Yes |
| Amazon EC2 | RevokeSecurityGroupIngress | Delete | Yes |
| Amazon EC2 | CreateFleet | Create | Yes |
| Amazon EC2 | ModifyVpnConnectionOptions | Edit | Yes |
| Amazon EC2 | DeleteTrafficMirrorFilterRule | Delete | Yes |
| Amazon EC2 | CreateLocalGatewayRouteTableVpcAssociation | Create | Yes |
| Amazon EC2 | ApplySecurityGroupsToClientVpnTargetNetwork | Edit | Yes |
| Amazon EC2 | DescribeAccountAttributes | View | Yes |
| Amazon EC2 | ModifyIdentityIdFormat | Edit | Yes |
| Amazon EC2 | CreateReservedInstancesListing | Create | Yes |
| Amazon EC2 | ReplaceRoute | Create | Yes |
| Amazon EC2 | AuthorizeSecurityGroupEgress | Create | Yes |
| Amazon EC2 | CreateTransitGatewayConnect | Create | Yes |
| Amazon EC2 | DescribeClassicLinkInstances | View | Yes |
| Amazon EC2 | DeleteNetworkAclEntry | Delete | Yes |
| Amazon EC2 | DescribeAvailabilityZones | View | Yes |
| Amazon EC2 | DescribeVolumeAttribute | View | Yes |
| Amazon EC2 | DeleteDhcpOptions | Delete | Yes |
| Amazon EC2 | CreateNatGateway | Create | Yes |
| Amazon EC2 | DeleteClientVpnEndpoint | Delete | Yes |
| Amazon EC2 | RegisterImage | Register | Yes |
| Amazon EC2 | CreateNetworkAclEntry | Create | Yes |
| Amazon EC2 | DeleteRouteTable | Delete | Yes |
| Amazon EC2 | DescribePublicIpvPools | View | Yes |
| Amazon EC2 | ModifyVpcEndpointServiceConfiguration | Edit | Yes |
| Amazon EC2 | CreateTransitGateway | Create | Yes |
| Amazon EC2 | DeleteTransitGateway | Delete | Yes |
| Amazon EC2 | AssociateTransitGatewayMulticastDomain | Create | Yes |
| Amazon EC2 | ModifyCapacityReservation | Edit | Yes |
| Amazon EC2 | CreateStoreImageTask | Create | Yes |
| Amazon EC2 | PurchaseScheduledInstances | Purchase | Yes |
| Amazon EC2 | ModifyVpcEndpoint | Edit | Yes |
| Amazon EC2 | CreateRouteTable | Create | Yes |
| Amazon EC2 | DescribeConversionTasks | View | Yes |
| Amazon EC2 | DescribeAggregateIdFormat | View | Yes |
| Amazon EC2 | DescribeEgressOnlyInternetGateways | View | Yes |
| Amazon EC2 | DeleteVpcEndpointServiceConfigurations | Delete | Yes |
| Amazon EC2 | DescribeSpotDatafeedSubscription | View | Yes |
| Amazon EC2 | DescribeMovingAddresses | View | Yes |
| Amazon EC2 | DescribeIdentityIdFormat | View | Yes |
| Amazon EC2 | DescribeExportTasks | View | Yes |
| Amazon EC2 | DescribeFleetHistory | View | Yes |
| Amazon EC2 | DescribeSecurityGroupReferences | View | Yes |
| Amazon EC2 | DescribeTransitGatewayPeeringAttachments | View | Yes |
| Amazon EC2 | CreateSecurityGroup | Create | Yes |
| Amazon EC2 | DeleteLocalGatewayRouteTableVpcAssociation | Delete | Yes |
| Amazon EC2 | DeleteTransitGatewayMulticastDomain | Delete | Yes |
| Amazon EC2 | CreateTransitGatewayPrefixListReference | Create | Yes |
| Amazon EC2 | CreateKeyPair | Create | Yes |
| Amazon EC2 | ModifyVpcEndpointConnectionNotification | Edit | Yes |
| Amazon EC2 | DescribeCustomerGateways | View | Yes |
| Amazon EC2 | UnassignIpvAddresses | Edit | Yes |
| Amazon EC2 | ModifyVpnTunnelCertificate | Edit | Yes |
| Amazon EC2 | CreateTrafficMirrorTarget | Create | Yes |
| Amazon EC2 | CreateVpcPeeringConnection | Create | Yes |
| Amazon EC2 | GetLaunchTemplateData | View | Yes |
| Amazon EC2 | CancelExportTask | Delete | Yes |
| Amazon EC2 | AcceptReservedInstancesExchangeQuote | Approve | Yes |
| Amazon EC2 | ReplaceIamInstanceProfileAssociation | Create | Yes |
| Amazon EC2 | CreateVpnConnection | Create | Yes |
| Amazon EC2 | GetManagedPrefixListEntries | View | Yes |
| Amazon EC2 | DeleteNatGateway | Delete | Yes |
| Amazon EC2 | TerminateInstances | Terminate | Yes |
| Amazon EC2 | AttachClassicLinkVpc | Attach | Yes |
| Amazon EC2 | DescribeAddressesAttribute | View | Yes |
| Amazon EC2 | CancelSpotFleetRequests | Delete | Yes |
| Amazon EC2 | ModifyInstanceMetadataOptions | Edit | Yes |
| Amazon EC2 | GetCapacityReservationUsage | View | Yes |
| Amazon EC2 | DescribeFlowLogs | View | Yes |
| Amazon EC2 | UnassignPrivateIpAddresses | Edit | Yes |
| Amazon EC2 | DescribeScheduledInstanceAvailability | View | Yes |
| Amazon EC2 | CreateReplaceRootVolumeTask | Create | Yes |
| Amazon EC2 | DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations | View | Yes |
| Amazon EC2 | CreateVpcEndpoint | Create | Yes |
| Amazon EC2 | UpdateSecurityGroupRuleDescriptionsIngress | Edit | Yes |
| Amazon EC2 | RequestSpotFleet | Create | Yes |
| Amazon EC2 | DescribeStoreImageTasks | View | Yes |
| Amazon EC2 | ModifyNetworkInterfaceAttribute | Edit | Yes |
| Amazon EC2 | ModifyVpnTunnelOptions | Edit | Yes |
| Amazon EC2 | DescribeFpgaImages | View | Yes |
| Amazon EC2 | DescribeSpotFleetRequests | View | Yes |
| Amazon EC2 | DescribeVpcEndpointServiceConfigurations | View | Yes |
| Amazon EC2 | CreateDhcpOptions | Create | Yes |
| Amazon EC2 | ImportSnapshot | Create | Yes |
| Amazon EC2 | CreateTransitGatewayRouteTable | Create | Yes |
| Amazon EC2 | ModifySpotFleetRequest | Edit | Yes |
| Amazon EC2 | CreateSubnet | Create | Yes |
| Amazon EC2 | AssociateEnclaveCertificateIamRole | Create | Yes |
| Amazon EC2 | CreateLocalGatewayRoute | Create | Yes |
| Amazon EC2 | DescribeSpotFleetInstances | View | Yes |
| Amazon EC2 | ExportClientVpnClientConfiguration | View | Yes |
| Amazon EC2 | EnableVpcClassicLinkDnsSupport | Enable | Yes |
| Amazon EC2 | DescribeVolumes | View | Yes |
| Amazon EC2 | DeleteFlowLogs | Delete | Yes |
| Amazon EC2 | ImportInstance | Create | Yes |
| Amazon EC2 | DescribeClientVpnConnections | View | Yes |
| Amazon EC2 | ModifyInstanceEventStartTime | Edit | Yes |
| Amazon EC2 | DescribeCapacityReservations | View | Yes |
| Amazon EC2 | RejectTransitGatewayMulticastDomainAssociations | Reject | Yes |
| Amazon EC2 | DescribeTrafficMirrorTargets | View | Yes |
| Amazon EC2 | ReplaceRouteTableAssociation | Create | Yes |
| Amazon EC2 | DeregisterInstanceEventNotificationAttributes | Deregister | Yes |
| Amazon EC2 | DeletePlacementGroup | Delete | Yes |
| Amazon EC2 | DescribeTransitGatewayConnectPeers | View | Yes |
| Amazon EC2 | DescribeElasticGpus | View | Yes |
| Amazon EC2 | DescribeIdFormat | View | Yes |
| Amazon EC2 | CreateVpc | Create | Yes |
| Amazon EC2 | ModifyClientVpnEndpoint | Edit | Yes |
| Amazon EC2 | GetTransitGatewayRouteTablePropagations | View | Yes |
| Amazon EC2 | CreateNetworkAcl | Create | Yes |
| Amazon EC2 | CopyFpgaImage | Copy | Yes |
| Amazon EC2 | DescribeFastSnapshotRestores | View | Yes |
| Amazon EC2 | StartVpcEndpointServicePrivateDnsVerification | Start | Yes |
| Amazon EC2 | AttachInternetGateway | Attach | Yes |
| Amazon EC2 | DescribeVpcEndpointServices | View | Yes |
| Amazon EC2 | RevokeClientVpnIngress | Delete | Yes |
| Amazon EC2 | CreateVolume | Create | Yes |
| Amazon EC2 | DescribeSecurityGroups | View | Yes |
| Amazon EC2 | DisassociateIamInstanceProfile | Delete | Yes |
| Amazon EC2 | CreateCarrierGateway | Create | Yes |
| Amazon EC2 | DescribeImportSnapshotTasks | View | Yes |
| Amazon EC2 | DeleteLaunchTemplate | Delete | Yes |
| Amazon EC2 | DeleteVpc | Delete | Yes |
| Amazon EC2 | CreateTransitGatewayVpcAttachment | Create | Yes |
| Amazon EC2 | DescribeInstanceEventNotificationAttributes | View | Yes |
| Amazon EC2 | ReplaceNetworkAclAssociation | Create | Yes |
| Amazon EC2 | ResetAddressAttribute | Edit | Yes |
| Amazon EC2 | DetachVolume | Delete | Yes |
| Amazon EC2 | CreateTransitGatewayRoute | Create | Yes |
| Amazon EC2 | DescribeNetworkInsightsPaths | View | Yes |
| Amazon EC2 | RestoreAddressToClassic | Create | Yes |
| Amazon EC2 | GetTransitGatewayPrefixListReferences | View | Yes |
| Amazon EC2 | DescribeImageAttribute | View | Yes |
| Amazon EC2 | GetConsoleScreenshot | View | Yes |
| Amazon EC2 | DeleteTransitGatewayPeeringAttachment | Delete | Yes |
| Amazon EC2 | AssignIpvAddresses | Create | Yes |
| Amazon EC2 | DescribeVolumesModifications | View | Yes |
| Amazon EC2 | SearchTransitGatewayMulticastGroups | Search | Yes |
| Amazon EC2 | DescribeInstanceCreditSpecifications | View | Yes |
| Amazon EC2 | CreateLaunchTemplateVersion | Create | Yes |
| Amazon EC2 | GetReservedInstancesExchangeQuote | View | Yes |
| Amazon EC2 | AssociateRouteTable | Create | Yes |
| Amazon EC2 | StopInstances | Stop | Yes |
| Amazon EC2 | DescribeVpcEndpointConnectionNotifications | View | Yes |
| Amazon EC2 | DeleteTransitGatewayPrefixListReference | Delete | Yes |
| Amazon EC2 | DescribeVpcClassicLink | View | Yes |
| Amazon EC2 | ImportClientVpnClientCertificateRevocationList | Create | Yes |
| Amazon EC2 | DescribeFleets | View | Yes |
| Amazon EC2 | DeleteNetworkInsightsAnalysis | Delete | Yes |
| Amazon EC2 | CancelCapacityReservation | Delete | Yes |
| Amazon EC2 | DescribeTransitGatewayVpcAttachments | View | Yes |
| Amazon EC2 | RunInstances | Create | Yes |
| Amazon EC2 | GetHostReservationPurchasePreview | View | Yes |
| Amazon EC2 | DeleteClientVpnRoute | Delete | Yes |
| Amazon EC2 | DescribeInstances | View | Yes |
| Amazon EC2 | DescribeHosts | View | Yes |
| Amazon EC2 | AdvertiseByoipCidr | Create | Yes |
| Amazon EC2 | ModifyTransitGatewayVpcAttachment | Edit | Yes |
| Amazon EC2 | ReleaseAddress | Create | Yes |
| Amazon EC2 | ModifyLaunchTemplate | Edit | Yes |
| Amazon EC2 | DescribeLocalGateways | View | Yes |
| Amazon EC2 | GetDefaultCreditSpecification | View | Yes |
| Amazon EC2 | DescribeSnapshots | View | Yes |
| Amazon EC2 | DescribeInstanceTypes | View | Yes |
| Amazon EC2 | DisableVpcClassicLink | Delete | Yes |
| Amazon EC2 | ModifyHosts | Edit | Yes |
| Amazon EC2 | ResetFpgaImageAttribute | Edit | Yes |
| Amazon EC2 | ModifyTrafficMirrorSession | Edit | Yes |
| Amazon EC2 | EnableSerialConsoleAccess | Enable | Yes |
| Amazon EC2 | ResetInstanceAttribute | Edit | Yes |
| Amazon EC2 | PurchaseReservedInstancesOffering | Purchase | Yes |
| Amazon EC2 | DescribeBundleTasks | View | Yes |
| Amazon EC2 | DescribeTransitGatewayConnects | View | Yes |
| Amazon EC2 | DescribeAddresses | View | Yes |
| Amazon EC2 | DeleteNetworkInterface | Delete | Yes |
| Amazon EC2 | RejectVpcEndpointConnections | Reject | Yes |
| Amazon EC2 | GetTransitGatewayMulticastDomainAssociations | View | Yes |
| Amazon EC2 | DescribeTransitGatewayAttachments | View | Yes |
| Amazon EC2 | CreateRestoreImageTask | Create | Yes |
| Amazon EC2 | DescribeReservedInstances | View | Yes |
| Amazon EC2 | GetPasswordData | View | Yes |
| Amazon EC2 | DeleteTransitGatewayRoute | Delete | Yes |
| Amazon EC2 | DisassociateVpcCidrBlock | Delete | Yes |
| Amazon EC2 | ModifyTrafficMirrorFilterNetworkServices | Edit | Yes |
| Amazon EC2 | CreateVpnGateway | Create | Yes |
| Amazon EC2 | GetEbsDefaultKmsKeyId | View | Yes |
| Amazon EC2 | DeprovisionByoipCidr | Create | Yes |
| Amazon EC2 | DeleteVpnConnectionRoute | Delete | Yes |
| Amazon EC2 | ResetNetworkInterfaceAttribute | Edit | Yes |
| Amazon EC2 | DescribeInternetGateways | View | Yes |
| Amazon EC2 | DescribeTransitGatewayMulticastDomains | View | Yes |
| Amazon EC2 | DisableFastSnapshotRestores | Delete | Yes |
| Amazon EC2 | DescribeClientVpnAuthorizationRules | View | Yes |
| Amazon EC2 | DeleteSubnet | Delete | Yes |
| Amazon EC2 | DeleteRoute | Delete | Yes |
| Amazon EC2 | CreateManagedPrefixList | Create | Yes |
| Amazon EC2 | GetTransitGatewayAttachmentPropagations | View | Yes |
| Amazon EC2 | DescribeTransitGatewayRouteTables | View | Yes |
| Amazon EC2 | CreateTrafficMirrorSession | Create | Yes |
| Amazon EC2 | DescribeTrafficMirrorSessions | View | Yes |
| Amazon EC2 | GetAssociatedIpvPoolCidrs | View | Yes |
| Amazon EC2 | DescribeNatGateways | View | Yes |
| Amazon EC2 | DescribeSpotFleetRequestHistory | View | Yes |
| Amazon EC2 | DescribeVolumeStatus | View | Yes |
| Amazon EC2 | DescribeInstanceStatus | View | Yes |
| Amazon EC2 | DescribeLaunchTemplateVersions | View | Yes |
| Amazon EC2 | DescribeLocalGatewayVirtualInterfaces | View | Yes |
| Amazon EC2 | DisassociateTransitGatewayRouteTable | Delete | Yes |
| Amazon EC2 | GetGroupsForCapacityReservation | View | Yes |
| Amazon EC2 | DisableVgwRoutePropagation | Delete | Yes |
| Amazon EC2 | DeleteNetworkInterfacePermission | Delete | Yes |
| Amazon EC2 | DescribeSpotInstanceRequests | View | Yes |
| Amazon EC2 | SendDiagnosticInterrupt | Send | Yes |
| Amazon EC2 | CreateSnapshots | Create | Yes |
| Amazon EC2 | ModifyVolumeAttribute | Edit | Yes |
| Amazon EC2 | GetSerialConsoleAccessStatus | View | Yes |
| Amazon EC2 | DescribeInstanceAttribute | View | Yes |
| Amazon EC2 | ModifyVpcEndpointServicePermissions | Edit | Yes |
| Amazon EC2 | AssociateAddress | Create | Yes |
| Amazon EC2 | ImportKeyPair | Create | Yes |
| Amazon EC2 | DeleteVpnGateway | Delete | Yes |
| Amazon EC2 | DeleteTrafficMirrorTarget | Delete | Yes |
| Amazon EC2 | DescribeExportImageTasks | View | Yes |
| Amazon EC2 | DescribeRouteTables | View | Yes |
| Amazon EC2 | DescribeDhcpOptions | View | Yes |
| Amazon EC2 | CreatePlacementGroup | Create | Yes |
| Amazon EC2 | DeleteKeyPair | Delete | Yes |
| Amazon EC2 | DescribeClientVpnEndpoints | View | Yes |
| Amazon EC2 | GetCoipPoolUsage | View | Yes |
| Amazon EC2 | ModifyVpcAttribute | Edit | Yes |
| Amazon EC2 | DeleteEgressOnlyInternetGateway | Delete | Yes |
| Amazon EC2 | DeleteNetworkInsightsPath | Delete | Yes |
| Amazon EC2 | DeleteTransitGatewayRouteTable | Delete | Yes |
| Amazon EC2 | DescribeVpnGateways | View | Yes |
| Amazon EC2 | DeleteTrafficMirrorFilter | Delete | Yes |
| Amazon EC2 | DeleteNetworkAcl | Delete | Yes |
| Amazon EC2 | TerminateClientVpnConnections | Terminate | Yes |
| Amazon EC2 | DisableVpcClassicLinkDnsSupport | Delete | Yes |
| Amazon EC2 | AssociateClientVpnTargetNetwork | Create | Yes |
| Amazon EC2 | DescribeTags | View | Yes |
| Amazon EC2 | DescribeKeyPairs | View | Yes |
| Amazon EC2 | AssociateIamInstanceProfile | Create | Yes |
| Amazon EC2 | AcceptVpcPeeringConnection | Approve | Yes |
| Amazon EC2 | AuthorizeClientVpnIngress | Create | Yes |
| Amazon EC2 | DisassociateAddress | Delete | Yes |
| Amazon EC2 | DeregisterTransitGatewayMulticastGroupSources | Deregister | Yes |
| Amazon EC2 | DescribeVpcEndpointServicePermissions | View | Yes |
| Amazon EC2 | EnableVolumeIO | Enable | Yes |
| Amazon EC2 | ModifyInstanceCreditSpecification | Edit | Yes |
| Amazon EC2 | DescribeInstanceTypeOfferings | View | Yes |
| Amazon EC2 | DeleteManagedPrefixList | Delete | Yes |
| Amazon EC2 | AllocateAddress | Create | Yes |
| Amazon EC2 | ModifyAvailabilityZoneGroup | Edit | Yes |
| Amazon EC2 | DescribeLaunchTemplates | View | Yes |
| Amazon EC2 | MonitorInstances | Create | Yes |
| Amazon EC2 | CreateVpcEndpointConnectionNotification | Create | Yes |
| Amazon EC2 | DeleteLocalGatewayRoute | Delete | Yes |
| Amazon EC2 | SearchTransitGatewayRoutes | Search | Yes |
| Amazon EC2 | DescribeVpcEndpoints | View | Yes |
| Amazon EC2 | DescribeFleetInstances | View | Yes |
| Amazon EC2 | ModifyIdFormat | Edit | Yes |
| Amazon EC2 | ModifyInstanceAttribute | Edit | Yes |
| Amazon EC2 | UpdateSecurityGroupRuleDescriptionsEgress | Edit | Yes |
| Amazon EC2 | CreateTransitGatewayConnectPeer | Create | Yes |
| Amazon EC2 | DescribeLocalGatewayRouteTableVpcAssociations | View | Yes |
| Amazon EC2 | DescribeNetworkAcls | View | Yes |
| Amazon EC2 | ModifySubnetAttribute | Edit | Yes |
| Amazon EC2 | ModifyFleet | Edit | Yes |
| Amazon EC2 | EnableTransitGatewayRouteTablePropagation | Enable | Yes |
| Amazon EC2 | ModifyAddressAttribute | Edit | Yes |
| Amazon EC2 | DescribeCarrierGateways | View | Yes |
| Amazon EC2 | ResetEbsDefaultKmsKeyId | Edit | Yes |
| Amazon EC2 | DeleteLaunchTemplateVersions | Delete | Yes |
| Amazon EC2 | CreateInstanceExportTask | Create | Yes |
| Amazon EC2 | DescribeFpgaImageAttribute | View | Yes |
| Amazon EC2 | DeleteCustomerGateway | Delete | Yes |
| Amazon EC2 | DeleteInternetGateway | Delete | Yes |
| Amazon EC2 | DescribeCoipPools | View | Yes |
| Amazon EC2 | PurchaseHostReservation | Purchase | Yes |
| Amazon EC2 | DeleteCarrierGateway | Delete | Yes |
| Amazon EC2 | EnableFastSnapshotRestores | Enable | Yes |
| Amazon EC2 | GetAssociatedEnclaveCertificateIamRoles | View | Yes |
| Amazon EC2 | DescribeManagedPrefixLists | View | Yes |
| Amazon EC2 | DescribePrefixLists | View | Yes |
| Amazon EC2 | DescribeIpvPools | View | Yes |
| Amazon EC2 | ModifyFpgaImageAttribute | Edit | Yes |
| Amazon EC2 | ModifyEbsDefaultKmsKeyId | Edit | Yes |
| Amazon EC2 | CreateCapacityReservation | Create | Yes |
| Amazon EC2 | DeleteTransitGatewayVpcAttachment | Delete | Yes |
| Amazon EC2 | DescribeReservedInstancesOfferings | View | Yes |
| Amazon EC2 | DescribeClientVpnTargetNetworks | View | Yes |
| Amazon EC2 | CopyImage | Copy | Yes |
| Amazon EC2 | RejectTransitGatewayPeeringAttachment | Reject | Yes |
| Amazon EC2 | DeleteVpcEndpoints | Delete | Yes |
| Amazon EC2 | DeleteVolume | Delete | Yes |
| Amazon EC2 | CreateDefaultVpc | Create | Yes |
| Amazon EC2 | DisassociateRouteTable | Delete | Yes |
| Amazon EC2 | ModifyInstancePlacement | Edit | Yes |
| Amazon EC2 | ModifyReservedInstances | Edit | Yes |
| Amazon EC2 | DescribeReservedInstancesModifications | View | Yes |
| Amazon EC2 | DescribeClientVpnRoutes | View | Yes |
| Amazon EC2 | ResetSnapshotAttribute | Edit | Yes |
| Amazon EC2 | BundleInstance | Create | Yes |
| Amazon EC2 | DescribeIamInstanceProfileAssociations | View | Yes |
| Amazon EC2 | DeregisterTransitGatewayMulticastGroupMembers | Deregister | Yes |
| Amazon EC2 | AcceptTransitGatewayMulticastDomainAssociations | Approve | Yes |
| Amazon EC2 | DeleteVpcPeeringConnection | Delete | Yes |
| Amazon EC2 | DeleteSnapshot | Delete | Yes |
| Amazon EC2 | ModifyVolume | Edit | Yes |
| Amazon EC2 | ModifyTransitGatewayPrefixListReference | Edit | Yes |
| Amazon EC2 | AuthorizeSecurityGroupIngress | Create | Yes |
| Amazon EC2 | CreateTrafficMirrorFilter | Create | Yes |
| Amazon EC2 | ModifyInstanceCapacityReservationAttributes | Edit | Yes |
| Amazon EC2 | DetachNetworkInterface | Delete | Yes |
| Amazon EC2 | ExportClientVpnClientCertificateRevocationList | View | Yes |
| Amazon EC2 | DeleteVpcEndpointConnectionNotifications | Delete | Yes |
| Amazon EC2 | GetFlowLogsIntegrationTemplate | View | Yes |
| Amazon EC2 | RegisterInstanceEventNotificationAttributes | Register | Yes |
| Amazon EC2 | RebootInstances | Reboot | Yes |
| Amazon EC2 | CancelBundleTask | Delete | Yes |
| Amazon EC2 | CreateImage | Create | Yes |
| Amazon EC2 | DescribeNetworkInterfaces | View | Yes |
| Amazon EC2 | GetManagedPrefixListAssociations | View | Yes |
| Amazon EC2 | RevokeSecurityGroupEgress | Delete | Yes |
| Amazon EC2 | DescribeNetworkInterfacePermissions | View | Yes |
| Amazon EC2 | CreateInternetGateway | Create | Yes |
| Amazon EC2 | DescribeImages | View | Yes |
| Amazon EC2 | CancelConversionTask | Delete | Yes |
| Amazon EC2 | StartNetworkInsightsAnalysis | Start | Yes |
| Amazon EC2 | CreateVpnConnectionRoute | Create | Yes |
| Amazon EC2 | DescribeHostReservations | View | Yes |
| Amazon EC2 | ProvisionByoipCidr | Create | Yes |
| Amazon EC2 | DetachVpnGateway | Delete | Yes |
| Amazon EC2 | DescribeTransitGateways | View | Yes |
| Amazon EC2 | SearchLocalGatewayRoutes | Search | Yes |
| Amazon EC2 | ReleaseHosts | Create | Yes |
| Amazon EC2 | AttachVolume | Attach | Yes |
| Amazon EC2 | DescribeTrafficMirrorFilters | View | Yes |
| Amazon EC2 | CreateNetworkInsightsPath | Create | Yes |
| Amazon EC2 | DisassociateTransitGatewayMulticastDomain | Delete | Yes |
| Amazon EC2 | CreateFpgaImage | Create | Yes |
| Amazon EC2 | DescribeRegions | View | Yes |
| Amazon EC2 | EnableEbsEncryptionByDefault | Enable | Yes |
| Amazon EC2 | AcceptVpcEndpointConnections | Approve | Yes |
| Amazon EC2 | DeleteFpgaImage | Delete | Yes |
| Amazon EC2 | DescribeByoipCidrs | View | Yes |
| Amazon EC2 | GetEbsEncryptionByDefault | View | Yes |
| Amazon EC2 | DescribeImportImageTasks | View | Yes |
| Amazon EC2 | DescribeScheduledInstances | View | Yes |
| Amazon EC2 | CreateTransitGatewayPeeringAttachment | Create | Yes |
| Amazon EC2 | RegisterTransitGatewayMulticastGroupMembers | Register | Yes |
| Amazon EC2 | ModifyTrafficMirrorFilterRule | Edit | Yes |
| Amazon EC2 | ReplaceTransitGatewayRoute | Create | Yes |
| Amazon EC2 | CreateFlowLogs | Create | Yes |
| Amazon EC2 | ModifySnapshotAttribute | Edit | Yes |
| Amazon EC2 | CreateSnapshot | Create | Yes |
| Amazon EC2 | ExportTransitGatewayRoutes | View | Yes |
| Amazon EC2 | DescribeHostReservationOfferings | View | Yes |
| Amazon EC2 | AssociateDhcpOptions | Create | Yes |
| Amazon EC2 | RequestSpotInstances | Create | Yes |
| Amazon EC2 | DescribeNetworkInsightsAnalyses | View | Yes |
| Amazon EC2 | DescribeReservedInstancesListings | View | Yes |
| Amazon EC2 | CreateNetworkInterfacePermission | Create | Yes |
| Amazon EC2 | ImportImage | Create | Yes |
| Amazon EC2 | WithdrawByoipCidr | Create | Yes |
| Amazon EC2 | DisassociateClientVpnTargetNetwork | Delete | Yes |
| Amazon EC2 | DeleteTransitGatewayConnectPeer | Delete | Yes |
| Amazon EC2 | AttachVpnGateway | Attach | Yes |
| Amazon EC2 | AcceptTransitGatewayPeeringAttachment | Approve | Yes |
| Amazon EC2 | CreateEgressOnlyInternetGateway | Create | Yes |
| Amazon EC2 | ModifyImageAttribute | Edit | Yes |
| Amazon EC2 | AssociateSubnetCidrBlock | Create | Yes |
| Amazon EC2 | DeleteSecurityGroup | Delete | Yes |
| Amazon EC2 | ModifyVpcTenancy | Edit | Yes |
| Amazon EC2 | CreateDefaultSubnet | Create | Yes |
| Amazon EC2 | DescribeReplaceRootVolumeTasks | View | Yes |
| Amazon EC2 | DescribeLocalGatewayRouteTables | View | Yes |
| Amazon EC2 | ReportInstanceStatus | Create | Yes |
| Amazon EC2 | DetachInternetGateway | Delete | Yes |
| Amazon EC2 | DescribeSubnets | View | Yes |
| Amazon EC2 | CreateTransitGatewayMulticastDomain | Create | Yes |
| Amazon EC2 | ReplaceNetworkAclEntry | Create | Yes |
| Amazon EC2 | DeleteFleets | Delete | Yes |
| Amazon EC2 | DisableSerialConsoleAccess | Delete | Yes |
| Amazon EC2 | DescribeStaleSecurityGroups | View | Yes |
| Amazon EC2 | RejectVpcPeeringConnection | Reject | Yes |
| Amazon EC2 | DescribeVpcEndpointConnections | View | Yes |
| Amazon EC2 | CancelReservedInstancesListing | Delete | Yes |
| Amazon EC2 | AllocateHosts | Create | Yes |
| Amazon EC2 | DisableTransitGatewayRouteTablePropagation | Delete | Yes |
| Amazon EC2 | DescribeLocalGatewayVirtualInterfaceGroups | View | Yes |
| Amazon EC2 | DetachClassicLinkVpc | Delete | Yes |
| Amazon EC2 | EnableVgwRoutePropagation | Enable | Yes |
| Amazon EC2 | CreateClientVpnRoute | Create | Yes |
| Amazon EC2 | CreateSpotDatafeedSubscription | Create | Yes |
| Amazon EC2 | ResetImageAttribute | Edit | Yes |
| Amazon EC2 | AssociateVpcCidrBlock | Create | Yes |
| Amazon EC2 | GetConsoleOutput | View | Yes |
| Amazon EC2 | AcceptTransitGatewayVpcAttachment | Approve | Yes |
| Amazon EC2 | DeleteTransitGatewayConnect | Delete | Yes |
| Amazon EC2 | DescribeVpcPeeringConnections | View | Yes |
| Amazon EC2 | RunScheduledInstances | Create | Yes |
| Amazon EC2 | AssociateTransitGatewayRouteTable | Create | Yes |
| Amazon EC2 | DescribePlacementGroups | View | Yes |
| Amazon EC2 | RestoreManagedPrefixListVersion | Create | Yes |
| Amazon EC2 | StartInstances | Start | Yes |
| Amazon EC2 | DescribeSnapshotAttribute | View | Yes |
| Amazon EC2 | ImportVolume | Create | Yes |
| Amazon EC2 | ModifyDefaultCreditSpecification | Edit | Yes |
| Amazon EC2 Container Service | SubmitAttachmentStateChanges | Create | Yes |
| Amazon EC2 Container Service | DeleteCapacityProvider | Delete | Yes |
| Amazon EC2 Container Service | CreateService | Create | Yes |
| Amazon EC2 Container Service | PutAccountSetting | Edit | Yes |
| Amazon EC2 Container Service | RegisterContainerInstance | Register | Yes |
| Amazon EC2 Container Service | TagResource | Create | Yes |
| Amazon EC2 Container Service | ListAccountSettings | View | Yes |
| Amazon EC2 Container Service | DeleteCluster | Delete | Yes |
| Amazon EC2 Container Service | PutAttributes | Edit | Yes |
| Amazon EC2 Container Service | ListAttributes | View | Yes |
| Amazon EC2 Container Service | DescribeServices | View | Yes |
| Amazon EC2 Container Service | DescribeClusters | View | Yes |
| Amazon EC2 Container Service | StartTask | Start | Yes |
| Amazon EC2 Container Service | DescribeTaskDefinition | View | Yes |
| Amazon EC2 Container Service | DescribeTasks | View | Yes |
| Amazon EC2 Container Service | DeregisterTaskDefinition | Deregister | Yes |
| Amazon EC2 Container Service | RegisterTaskDefinition | Register | Yes |
| Amazon EC2 Container Service | CreateTaskSet | Create | Yes |
| Amazon EC2 Container Service | UpdateClusterSettings | Edit | Yes |
| Amazon EC2 Container Service | UpdateTaskSet | Edit | Yes |
| Amazon EC2 Container Service | UpdateCapacityProvider | Edit | Yes |
| Amazon EC2 Container Service | ListTasks | View | Yes |
| Amazon EC2 Container Service | PutAccountSettingDefault | Edit | Yes |
| Amazon EC2 Container Service | UpdateService | Edit | Yes |
| Amazon EC2 Container Service | DescribeContainerInstances | View | Yes |
| Amazon EC2 Container Service | DeleteService | Delete | Yes |
| Amazon EC2 Container Service | DeregisterContainerInstance | Deregister | Yes |
| Amazon EC2 Container Service | PutClusterCapacityProviders | Edit | Yes |
| Amazon EC2 Container Service | ListTagsForResource | View | Yes |
| Amazon EC2 Container Service | DescribeTaskSets | View | Yes |
| Amazon EC2 Container Service | SubmitContainerStateChange | Create | Yes |
| Amazon EC2 Container Service | ListClusters | View | Yes |
| Amazon EC2 Container Service | StopTask | Stop | Yes |
| Amazon EC2 Container Service | DeleteAccountSetting | Delete | Yes |
| Ama |