Supported AWS Entities for Real-time Protection
Supported AWS Entities for Real-time Protection
Netskope for IaaS Real-time Protection provides robust real-time activity monitoring and enforcement for AWS Services across API and Browser/Console traffic. The following table provides the list of AWS services that are supported for Real-time Protection.
| AWS App Name | Action Name | Connector Activity Name | Browser and API Traffic |
|---|---|---|---|
| Amazon API Gateway | UpdateStage | Edit | Yes |
| Amazon API Gateway | GetStage | View | Yes |
| Amazon API Gateway | DeleteStage | Delete | Yes |
| Amazon API Gateway | GenerateClientCertificate | Create | Yes |
| Amazon API Gateway | GetClientCertificates | View | Yes |
| Amazon API Gateway | GetGatewayResponses | View | Yes |
| Amazon API Gateway | CreateUsagePlan | Create | Yes |
| Amazon API Gateway | GetUsagePlans | View | Yes |
| Amazon API Gateway | CreateApiKey | Create | Yes |
| Amazon API Gateway | GetApiKeys | View | Yes |
| Amazon API Gateway | PutIntegrationResponse | Edit | Yes |
| Amazon API Gateway | UpdateIntegrationResponse | Edit | Yes |
| Amazon API Gateway | GetIntegrationResponse | View | Yes |
| Amazon API Gateway | DeleteIntegrationResponse | Delete | Yes |
| Amazon API Gateway | UpdateUsage | Edit | Yes |
| Amazon API Gateway | UpdateApiKey | Edit | Yes |
| Amazon API Gateway | GetApiKey | View | Yes |
| Amazon API Gateway | DeleteApiKey | Delete | Yes |
| Amazon API Gateway | FlushStageCache | Delete | Yes |
| Amazon API Gateway | UpdateClientCertificate | Edit | Yes |
| Amazon API Gateway | GetClientCertificate | View | Yes |
| Amazon API Gateway | DeleteClientCertificate | Delete | Yes |
| Amazon API Gateway | UpdateResource | Edit | Yes |
| Amazon API Gateway | GetResource | View | Yes |
| Amazon API Gateway | DeleteResource | Delete | Yes |
| Amazon API Gateway | ImportDocumentationParts | Create | Yes |
| Amazon API Gateway | CreateDocumentationPart | Create | Yes |
| Amazon API Gateway | GetDocumentationParts | View | Yes |
| Amazon API Gateway | UpdateDeployment | Edit | Yes |
| Amazon API Gateway | GetDeployment | View | Yes |
| Amazon API Gateway | DeleteDeployment | Delete | Yes |
| Amazon API Gateway | CreateStage | Create | Yes |
| Amazon API Gateway | GetStages | View | Yes |
| Amazon API Gateway | UpdateDocumentationPart | Edit | Yes |
| Amazon API Gateway | GetDocumentationPart | View | Yes |
| Amazon API Gateway | DeleteDocumentationPart | Delete | Yes |
| Amazon API Gateway | UpdateAuthorizer | Edit | Yes |
| Amazon API Gateway | TestInvokeAuthorizer | Create | Yes |
| Amazon API Gateway | GetAuthorizer | View | Yes |
| Amazon API Gateway | DeleteAuthorizer | Delete | Yes |
| Amazon API Gateway | CreateAuthorizer | Create | Yes |
| Amazon API Gateway | GetAuthorizers | View | Yes |
| Amazon API Gateway | UpdateDocumentationVersion | Edit | Yes |
| Amazon API Gateway | GetDocumentationVersion | View | Yes |
| Amazon API Gateway | DeleteDocumentationVersion | Delete | Yes |
| Amazon API Gateway | GetSdkTypes | View | Yes |
| Amazon API Gateway | UpdateModel | Edit | Yes |
| Amazon API Gateway | GetModel | View | Yes |
| Amazon API Gateway | DeleteModel | Delete | Yes |
| Amazon API Gateway | CreateVpcLink | Create | Yes |
| Amazon API Gateway | GetVpcLinks | View | Yes |
| Amazon API Gateway | CreateRestApi | Create | Yes |
| Amazon API Gateway | GetRestApis | View | Yes |
| Amazon API Gateway | UpdateRequestValidator | Edit | Yes |
| Amazon API Gateway | GetRequestValidator | View | Yes |
| Amazon API Gateway | DeleteRequestValidator | Delete | Yes |
| Amazon API Gateway | ImportApiKeys | Create | Yes |
| Amazon API Gateway | GetMethod | View | Yes |
| Amazon API Gateway | UpdateMethod | Edit | Yes |
| Amazon API Gateway | PutMethod | Edit | Yes |
| Amazon API Gateway | TestInvokeMethod | Create | Yes |
| Amazon API Gateway | DeleteMethod | Delete | Yes |
| Amazon API Gateway | CreateUsagePlanKey | Create | Yes |
| Amazon API Gateway | GetUsagePlanKeys | View | Yes |
| Amazon API Gateway | UpdateVpcLink | Edit | Yes |
| Amazon API Gateway | GetVpcLink | View | Yes |
| Amazon API Gateway | DeleteVpcLink | Delete | Yes |
| Amazon API Gateway | GetUsagePlanKey | View | Yes |
| Amazon API Gateway | DeleteUsagePlanKey | Delete | Yes |
| Amazon API Gateway | CreateDocumentationVersion | Create | Yes |
| Amazon API Gateway | GetDocumentationVersions | View | Yes |
| Amazon API Gateway | GetModelTemplate | View | Yes |
| Amazon API Gateway | CreateRequestValidator | Create | Yes |
| Amazon API Gateway | GetRequestValidators | View | Yes |
| Amazon API Gateway | UpdateBasePathMapping | Edit | Yes |
| Amazon API Gateway | GetBasePathMapping | View | Yes |
| Amazon API Gateway | DeleteBasePathMapping | Delete | Yes |
| Amazon API Gateway | GetExport | View | Yes |
| Amazon API Gateway | PutRestApi | Edit | Yes |
| Amazon API Gateway | UpdateRestApi | Edit | Yes |
| Amazon API Gateway | GetRestApi | View | Yes |
| Amazon API Gateway | DeleteRestApi | Delete | Yes |
| Amazon API Gateway | PutMethodResponse | Edit | Yes |
| Amazon API Gateway | UpdateMethodResponse | Edit | Yes |
| Amazon API Gateway | GetMethodResponse | View | Yes |
| Amazon API Gateway | DeleteMethodResponse | Delete | Yes |
| Amazon API Gateway | UpdateUsagePlan | Edit | Yes |
| Amazon API Gateway | GetUsagePlan | View | Yes |
| Amazon API Gateway | DeleteUsagePlan | Delete | Yes |
| Amazon API Gateway | GetUsage | View | Yes |
| Amazon API Gateway | UpdateAccount | Edit | Yes |
| Amazon API Gateway | GetAccount | View | Yes |
| Amazon API Gateway | UntagResource | Delete | Yes |
| Amazon API Gateway | GetResources | View | Yes |
| Amazon API Gateway | CreateResource | Create | Yes |
| Amazon API Gateway | TagResource | Create | Yes |
| Amazon API Gateway | GetTags | View | Yes |
| Amazon API Gateway | FlushStageAuthorizersCache | Delete | Yes |
| Amazon API Gateway | ImportRestApi | Create | Yes |
| Amazon API Gateway | CreateDomainName | Create | Yes |
| Amazon API Gateway | GetDomainNames | View | Yes |
| Amazon API Gateway | UpdateDomainName | Edit | Yes |
| Amazon API Gateway | GetDomainName | View | Yes |
| Amazon API Gateway | DeleteDomainName | Delete | Yes |
| Amazon API Gateway | CreateDeployment | Create | Yes |
| Amazon API Gateway | GetDeployments | View | Yes |
| Amazon API Gateway | GetSdkType | View | Yes |
| Amazon API Gateway | PutGatewayResponse | Edit | Yes |
| Amazon API Gateway | UpdateGatewayResponse | Edit | Yes |
| Amazon API Gateway | GetGatewayResponse | View | Yes |
| Amazon API Gateway | DeleteGatewayResponse | Delete | Yes |
| Amazon API Gateway | PutIntegration | Edit | Yes |
| Amazon API Gateway | UpdateIntegration | Edit | Yes |
| Amazon API Gateway | GetIntegration | View | Yes |
| Amazon API Gateway | DeleteIntegration | Delete | Yes |
| Amazon API Gateway | CreateModel | Create | Yes |
| Amazon API Gateway | GetModels | View | Yes |
| Amazon API Gateway | GetSdk | View | Yes |
| Amazon API Gateway | CreateBasePathMapping | Create | Yes |
| Amazon API Gateway | GetBasePathMappings | View | Yes |
| Amazon API Gateway Management API | PostToConnection | Create | Yes |
| Amazon API Gateway Management API | GetConnection | View | Yes |
| Amazon API Gateway Management API | DeleteConnection | Delete | Yes |
| Amazon API Gateway V2 | UpdateVpcLink | Edit | Yes |
| Amazon API Gateway V2 | GetVpcLink | View | Yes |
| Amazon API Gateway V2 | DeleteVpcLink | Delete | Yes |
| Amazon API Gateway V2 | DeleteCorsConfiguration | Delete | Yes |
| Amazon API Gateway V2 | CreateApiMapping | Create | Yes |
| Amazon API Gateway V2 | GetApiMappings | View | Yes |
| Amazon API Gateway V2 | CreateVpcLink | Create | Yes |
| Amazon API Gateway V2 | GetVpcLinks | View | Yes |
| Amazon API Gateway V2 | CreateIntegrationResponse | Create | Yes |
| Amazon API Gateway V2 | GetIntegrationResponses | View | Yes |
| Amazon API Gateway V2 | DeleteRouteSettings | Delete | Yes |
| Amazon API Gateway V2 | UpdateIntegration | Edit | Yes |
| Amazon API Gateway V2 | GetIntegration | View | Yes |
| Amazon API Gateway V2 | DeleteIntegration | Delete | Yes |
| Amazon API Gateway V2 | CreateRouteResponse | Create | Yes |
| Amazon API Gateway V2 | GetRouteResponses | View | Yes |
| Amazon API Gateway V2 | CreateIntegration | Create | Yes |
| Amazon API Gateway V2 | GetIntegrations | View | Yes |
| Amazon API Gateway V2 | CreateDeployment | Create | Yes |
| Amazon API Gateway V2 | GetDeployments | View | Yes |
| Amazon API Gateway V2 | CreateRoute | Create | Yes |
| Amazon API Gateway V2 | GetRoutes | View | Yes |
| Amazon API Gateway V2 | UntagResource | Delete | Yes |
| Amazon API Gateway V2 | UpdateDomainName | Edit | Yes |
| Amazon API Gateway V2 | GetDomainName | View | Yes |
| Amazon API Gateway V2 | DeleteDomainName | Delete | Yes |
| Amazon API Gateway V2 | UpdateAuthorizer | Edit | Yes |
| Amazon API Gateway V2 | GetAuthorizer | View | Yes |
| Amazon API Gateway V2 | DeleteAuthorizer | Delete | Yes |
| Amazon API Gateway V2 | ExportApi | View | Yes |
| Amazon API Gateway V2 | DeleteAccessLogSettings | Delete | Yes |
| Amazon API Gateway V2 | UpdateModel | Edit | Yes |
| Amazon API Gateway V2 | GetModel | View | Yes |
| Amazon API Gateway V2 | DeleteModel | Delete | Yes |
| Amazon API Gateway V2 | GetModelTemplate | View | Yes |
| Amazon API Gateway V2 | UpdateRouteResponse | Edit | Yes |
| Amazon API Gateway V2 | GetRouteResponse | View | Yes |
| Amazon API Gateway V2 | DeleteRouteResponse | Delete | Yes |
| Amazon API Gateway V2 | UpdateStage | Edit | Yes |
| Amazon API Gateway V2 | GetStage | View | Yes |
| Amazon API Gateway V2 | DeleteStage | Delete | Yes |
| Amazon API Gateway V2 | UpdateApiMapping | Edit | Yes |
| Amazon API Gateway V2 | GetApiMapping | View | Yes |
| Amazon API Gateway V2 | DeleteApiMapping | Delete | Yes |
| Amazon API Gateway V2 | CreateModel | Create | Yes |
| Amazon API Gateway V2 | GetModels | View | Yes |
| Amazon API Gateway V2 | ResetAuthorizersCache | Delete | Yes |
| Amazon API Gateway V2 | UpdateDeployment | Edit | Yes |
| Amazon API Gateway V2 | GetDeployment | View | Yes |
| Amazon API Gateway V2 | DeleteDeployment | Delete | Yes |
| Amazon API Gateway V2 | UpdateRoute | Edit | Yes |
| Amazon API Gateway V2 | GetRoute | View | Yes |
| Amazon API Gateway V2 | DeleteRoute | Delete | Yes |
| Amazon API Gateway V2 | CreateDomainName | Create | Yes |
| Amazon API Gateway V2 | GetDomainNames | View | Yes |
| Amazon API Gateway V2 | DeleteRouteRequestParameter | Delete | Yes |
| Amazon API Gateway V2 | ImportApi | Create | Yes |
| Amazon API Gateway V2 | CreateApi | Create | Yes |
| Amazon API Gateway V2 | GetApis | View | Yes |
| Amazon API Gateway V2 | CreateStage | Create | Yes |
| Amazon API Gateway V2 | GetStages | View | Yes |
| Amazon API Gateway V2 | UpdateIntegrationResponse | Edit | Yes |
| Amazon API Gateway V2 | GetIntegrationResponse | View | Yes |
| Amazon API Gateway V2 | DeleteIntegrationResponse | Delete | Yes |
| Amazon API Gateway V2 | CreateAuthorizer | Create | Yes |
| Amazon API Gateway V2 | GetAuthorizers | View | Yes |
| Amazon API Gateway V2 | ReimportApi | Edit | Yes |
| Amazon API Gateway V2 | UpdateApi | Edit | Yes |
| Amazon API Gateway V2 | GetApi | View | Yes |
| Amazon API Gateway V2 | DeleteApi | Delete | Yes |
| Amazon API Gateway V2 | TagResource | Create | Yes |
| Amazon API Gateway V2 | GetTags | View | Yes |
| Amazon Auto Scaling | PutScheduledUpdateGroupAction | Edit | Yes |
| Amazon Auto Scaling | DisableMetricsCollection | Delete | Yes |
| Amazon Auto Scaling | SetDesiredCapacity | Create | Yes |
| Amazon Auto Scaling | DetachLoadBalancers | Delete | Yes |
| Amazon Auto Scaling | CancelInstanceRefresh | Delete | Yes |
| Amazon Auto Scaling | SetInstanceHealth | Create | Yes |
| Amazon Auto Scaling | SuspendProcesses | Delete | Yes |
| Amazon Auto Scaling | DescribeTags | View | Yes |
| Amazon Auto Scaling | AttachInstances | Attach | Yes |
| Amazon Auto Scaling | RecordLifecycleActionHeartbeat | Create | Yes |
| Amazon Auto Scaling | DescribeAccountLimits | View | Yes |
| Amazon Auto Scaling | DescribeAdjustmentTypes | View | Yes |
| Amazon Auto Scaling | EnableMetricsCollection | Enable | Yes |
| Amazon Auto Scaling | DescribeScalingProcessTypes | View | Yes |
| Amazon Auto Scaling | DeleteScheduledAction | Delete | Yes |
| Amazon Auto Scaling | TerminateInstanceInAutoScalingGroup | Terminate | Yes |
| Amazon Auto Scaling | PutLifecycleHook | Edit | Yes |
| Amazon Auto Scaling | CreateAutoScalingGroup | Create | Yes |
| Amazon Auto Scaling | SetInstanceProtection | Create | Yes |
| Amazon Auto Scaling | PutScalingPolicy | Edit | Yes |
| Amazon Auto Scaling | ExitStandby | Create | Yes |
| Amazon Auto Scaling | DescribeInstanceRefreshes | View | Yes |
| Amazon Auto Scaling | DescribeAutoScalingNotificationTypes | View | Yes |
| Amazon Auto Scaling | PutWarmPool | Edit | Yes |
| Amazon Auto Scaling | DescribeLoadBalancerTargetGroups | View | Yes |
| Amazon Auto Scaling | AttachLoadBalancers | Attach | Yes |
| Amazon Auto Scaling | CreateOrUpdateTags | Create | Yes |
| Amazon Auto Scaling | DeletePolicy | Delete | Yes |
| Amazon Auto Scaling | EnterStandby | Create | Yes |
| Amazon Auto Scaling | DeleteWarmPool | Delete | Yes |
| Amazon Auto Scaling | DescribeMetricCollectionTypes | View | Yes |
| Amazon Auto Scaling | DescribeAutoScalingGroups | View | Yes |
| Amazon Auto Scaling | DeleteAutoScalingGroup | Delete | Yes |
| Amazon Auto Scaling | DescribeLifecycleHooks | View | Yes |
| Amazon Auto Scaling | DetachInstances | Delete | Yes |
| Amazon Auto Scaling | DescribeWarmPool | View | Yes |
| Amazon Auto Scaling | DeleteTags | Delete | Yes |
| Amazon Auto Scaling | DescribeLifecycleHookTypes | View | Yes |
| Amazon Auto Scaling | DeleteLaunchConfiguration | Delete | Yes |
| Amazon Auto Scaling | DescribeLaunchConfigurations | View | Yes |
| Amazon Auto Scaling | DeleteNotificationConfiguration | Delete | Yes |
| Amazon Auto Scaling | PutNotificationConfiguration | Edit | Yes |
| Amazon Auto Scaling | DescribeNotificationConfigurations | View | Yes |
| Amazon Auto Scaling | DeleteLifecycleHook | Delete | Yes |
| Amazon Auto Scaling | DescribeScheduledActions | View | Yes |
| Amazon Auto Scaling | DescribeScalingActivities | View | Yes |
| Amazon Auto Scaling | DescribeTerminationPolicyTypes | View | Yes |
| Amazon Auto Scaling | DescribeAutoScalingInstances | View | Yes |
| Amazon Auto Scaling | UpdateAutoScalingGroup | Edit | Yes |
| Amazon Auto Scaling | CompleteLifecycleAction | Create | Yes |
| Amazon Auto Scaling | DescribeLoadBalancers | View | Yes |
| Amazon Auto Scaling | DescribePolicies | View | Yes |
| Amazon Auto Scaling | DetachLoadBalancerTargetGroups | Delete | Yes |
| Amazon Auto Scaling | ResumeProcesses | Create | Yes |
| Amazon Auto Scaling | CreateLaunchConfiguration | Create | Yes |
| Amazon Auto Scaling | ExecutePolicy | Create | Yes |
| Amazon Auto Scaling | StartInstanceRefresh | Start | Yes |
| Amazon Auto Scaling | AttachLoadBalancerTargetGroups | Attach | Yes |
| Amazon Certificate Manager | ListCertificates | View | Yes |
| Amazon Certificate Manager | PutAccountConfiguration | Edit | Yes |
| Amazon Certificate Manager | ExportCertificate | View | Yes |
| Amazon Certificate Manager | AddTagsToCertificate | Create | Yes |
| Amazon Certificate Manager | ResendValidationEmail | Create | Yes |
| Amazon Certificate Manager | RenewCertificate | Create | Yes |
| Amazon Certificate Manager | DescribeCertificate | View | Yes |
| Amazon Certificate Manager | ListTagsForCertificate | View | Yes |
| Amazon Certificate Manager | ImportCertificate | Create | Yes |
| Amazon Certificate Manager | RequestCertificate | Create | Yes |
| Amazon Certificate Manager | DeleteCertificate | Delete | Yes |
| Amazon Certificate Manager | UpdateCertificateOptions | Edit | Yes |
| Amazon Certificate Manager | GetCertificate | View | Yes |
| Amazon Certificate Manager | GetAccountConfiguration | View | Yes |
| Amazon Certificate Manager | RemoveTagsFromCertificate | Delete | Yes |
| Amazon CloudFormation | ExecuteChangeSet | Create | Yes |
| Amazon CloudFormation | DetectStackResourceDrift | Create | Yes |
| Amazon CloudFormation | DescribeStackResourceDrifts | View | Yes |
| Amazon CloudFormation | DetectStackDrift | Create | Yes |
| Amazon CloudFormation | DeleteStack | Delete | Yes |
| Amazon CloudFormation | UpdateStack | Edit | Yes |
| Amazon CloudFormation | DescribeTypeRegistration | View | Yes |
| Amazon CloudFormation | ValidateTemplate | Create | Yes |
| Amazon CloudFormation | ListStackSets | View | Yes |
| Amazon CloudFormation | SetStackPolicy | Create | Yes |
| Amazon CloudFormation | DescribeStackSetOperation | View | Yes |
| Amazon CloudFormation | GetStackPolicy | View | Yes |
| Amazon CloudFormation | DescribeAccountLimits | View | Yes |
| Amazon CloudFormation | RegisterType | Register | Yes |
| Amazon CloudFormation | DeleteChangeSet | Delete | Yes |
| Amazon CloudFormation | DescribeStackResources | View | Yes |
| Amazon CloudFormation | UpdateStackInstances | Edit | Yes |
| Amazon CloudFormation | StopStackSetOperation | Stop | Yes |
| Amazon CloudFormation | ListStackResources | View | Yes |
| Amazon CloudFormation | GetTemplate | View | Yes |
| Amazon CloudFormation | SignalResource | Create | Yes |
| Amazon CloudFormation | EstimateTemplateCost | Create | Yes |
| Amazon CloudFormation | ListStackSetOperations | View | Yes |
| Amazon CloudFormation | ListTypeVersions | View | Yes |
| Amazon CloudFormation | DescribeStackEvents | View | Yes |
| Amazon CloudFormation | ListStacks | View | Yes |
| Amazon CloudFormation | RecordHandlerProgress | Create | Yes |
| Amazon CloudFormation | ListTypes | View | Yes |
| Amazon CloudFormation | DescribeChangeSet | View | Yes |
| Amazon CloudFormation | ListImports | View | Yes |
| Amazon CloudFormation | CreateStackSet | Create | Yes |
| Amazon CloudFormation | DeleteStackSet | Delete | Yes |
| Amazon CloudFormation | UpdateStackSet | Edit | Yes |
| Amazon CloudFormation | DescribeStacks | View | Yes |
| Amazon CloudFormation | CreateChangeSet | Create | Yes |
| Amazon CloudFormation | CreateStackInstances | Create | Yes |
| Amazon CloudFormation | CancelUpdateStack | Delete | Yes |
| Amazon CloudFormation | DescribeStackDriftDetectionStatus | View | Yes |
| Amazon CloudFormation | UpdateTerminationProtection | Edit | Yes |
| Amazon CloudFormation | SetTypeDefaultVersion | Create | Yes |
| Amazon CloudFormation | DescribeStackResource | View | Yes |
| Amazon CloudFormation | ListStackSetOperationResults | View | Yes |
| Amazon CloudFormation | ListChangeSets | View | Yes |
| Amazon CloudFormation | ContinueUpdateRollback | Create | Yes |
| Amazon CloudFormation | ListTypeRegistrations | View | Yes |
| Amazon CloudFormation | DeregisterType | Deregister | Yes |
| Amazon CloudFormation | CreateStack | Create | Yes |
| Amazon CloudFormation | ListExports | View | Yes |
| Amazon CloudFormation | ListStackInstances | View | Yes |
| Amazon CloudFormation | GetTemplateSummary | View | Yes |
| Amazon CloudFormation | DescribeType | View | Yes |
| Amazon CloudFormation | DetectStackSetDrift | Create | Yes |
| Amazon CloudFormation | DescribeStackInstance | View | Yes |
| Amazon CloudFormation | DeleteStackInstances | Delete | Yes |
| Amazon CloudFormation | DescribeStackSet | View | Yes |
| Amazon CloudFront | GetInvalidation | View | Yes |
| Amazon CloudFront | GetCachePolicyConfig | View | Yes |
| Amazon CloudFront | UpdateRealtimeLogConfig | Edit | Yes |
| Amazon CloudFront | GetRealtimeLogConfig | View | Yes |
| Amazon CloudFront | UpdateFieldLevelEncryptionConfig | Edit | Yes |
| Amazon CloudFront | GetFieldLevelEncryptionConfig | View | Yes |
| Amazon CloudFront | GetKeyGroupConfig | View | Yes |
| Amazon CloudFront | ListDistributionsByKeyGroup | View | Yes |
| Amazon CloudFront | ListDistributionsByWebACLId | View | Yes |
| Amazon CloudFront | UpdateFieldLevelEncryptionProfile | Edit | Yes |
| Amazon CloudFront | GetFieldLevelEncryptionProfileConfig | View | Yes |
| Amazon CloudFront | UpdateDistribution | Edit | Yes |
| Amazon CloudFront | GetDistributionConfig | View | Yes |
| Amazon CloudFront | UpdateCachePolicy | Edit | Yes |
| Amazon CloudFront | GetCachePolicy | View | Yes |
| Amazon CloudFront | DeleteCachePolicy | Delete | Yes |
| Amazon CloudFront | GetFieldLevelEncryption | View | Yes |
| Amazon CloudFront | DeleteFieldLevelEncryptionConfig | Delete | Yes |
| Amazon CloudFront | UpdateCloudFrontOriginAccessIdentity | Edit | Yes |
| Amazon CloudFront | GetCloudFrontOriginAccessIdentityConfig | View | Yes |
| Amazon CloudFront | CreateStreamingDistribution | Create | Yes |
| Amazon CloudFront | ListStreamingDistributions | View | Yes |
| Amazon CloudFront | GetFieldLevelEncryptionProfile | View | Yes |
| Amazon CloudFront | DeleteFieldLevelEncryptionProfile | Delete | Yes |
| Amazon CloudFront | ListDistributionsByCachePolicyId | View | Yes |
| Amazon CloudFront | CreatePublicKey | Create | Yes |
| Amazon CloudFront | ListPublicKeys | View | Yes |
| Amazon CloudFront | CreateRealtimeLogConfig | Create | Yes |
| Amazon CloudFront | ListRealtimeLogConfigs | View | Yes |
| Amazon CloudFront | UntagResource | Delete | Yes |
| Amazon CloudFront | UpdatePublicKey | Edit | Yes |
| Amazon CloudFront | GetPublicKeyConfig | View | Yes |
| Amazon CloudFront | TagResource | Create | Yes |
| Amazon CloudFront | UpdateOriginRequestPolicy | Edit | Yes |
| Amazon CloudFront | GetOriginRequestPolicy | View | Yes |
| Amazon CloudFront | DeleteOriginRequestPolicy | Delete | Yes |
| Amazon CloudFront | CreateOriginRequestPolicy | Create | Yes |
| Amazon CloudFront | ListOriginRequestPolicies | View | Yes |
| Amazon CloudFront | UpdateKeyGroup | Edit | Yes |
| Amazon CloudFront | GetKeyGroup | View | Yes |
| Amazon CloudFront | DeleteKeyGroup | Delete | Yes |
| Amazon CloudFront | CreateCloudFrontOriginAccessIdentity | Create | Yes |
| Amazon CloudFront | ListCloudFrontOriginAccessIdentities | View | Yes |
| Amazon CloudFront | GetDistribution | View | Yes |
| Amazon CloudFront | DeleteDistribution | Delete | Yes |
| Amazon CloudFront | ListDistributionsByRealtimeLogConfig | View | Yes |
| Amazon CloudFront | CreateKeyGroup | Create | Yes |
| Amazon CloudFront | ListKeyGroups | View | Yes |
| Amazon CloudFront | CreateInvalidation | Create | Yes |
| Amazon CloudFront | ListInvalidations | View | Yes |
| Amazon CloudFront | GetPublicKey | View | Yes |
| Amazon CloudFront | DeletePublicKey | Delete | Yes |
| Amazon CloudFront | ListTagsForResource | View | Yes |
| Amazon CloudFront | DeleteRealtimeLogConfig | Delete | Yes |
| Amazon CloudFront | CreateFieldLevelEncryptionConfig | Create | Yes |
| Amazon CloudFront | ListFieldLevelEncryptionConfigs | View | Yes |
| Amazon CloudFront | GetOriginRequestPolicyConfig | View | Yes |
| Amazon CloudFront | CreateStreamingDistributionWithTags | Create | Yes |
| Amazon CloudFront | CreateFieldLevelEncryptionProfile | Create | Yes |
| Amazon CloudFront | ListFieldLevelEncryptionProfiles | View | Yes |
| Amazon CloudFront | CreateDistributionWithTags | Create | Yes |
| Amazon CloudFront | CreateDistribution | Create | Yes |
| Amazon CloudFront | ListDistributions | View | Yes |
| Amazon CloudFront | CreateCachePolicy | Create | Yes |
| Amazon CloudFront | ListCachePolicies | View | Yes |
| Amazon CloudFront | ListDistributionsByOriginRequestPolicyId | View | Yes |
| Amazon CloudFront | UpdateStreamingDistribution | Edit | Yes |
| Amazon CloudFront | GetStreamingDistributionConfig | View | Yes |
| Amazon CloudFront | CreateMonitoringSubscription | Create | Yes |
| Amazon CloudFront | GetMonitoringSubscription | View | Yes |
| Amazon CloudFront | DeleteMonitoringSubscription | Delete | Yes |
| Amazon CloudFront | GetStreamingDistribution | View | Yes |
| Amazon CloudFront | DeleteStreamingDistribution | Delete | Yes |
| Amazon CloudFront | GetCloudFrontOriginAccessIdentity | View | Yes |
| Amazon CloudFront | DeleteCloudFrontOriginAccessIdentity | Delete | Yes |
| Amazon CloudSearch | DefineExpression | Create | Yes |
| Amazon CloudSearch | DeleteExpression | Delete | Yes |
| Amazon CloudSearch | DefineIndexField | Create | Yes |
| Amazon CloudSearch | ListDomainNames | View | Yes |
| Amazon CloudSearch | CreateDomain | Create | Yes |
| Amazon CloudSearch | DescribeExpressions | View | Yes |
| Amazon CloudSearch | DefineSuggester | Create | Yes |
| Amazon CloudSearch | DescribeAnalysisSchemes | View | Yes |
| Amazon CloudSearch | DeleteIndexField | Delete | Yes |
| Amazon CloudSearch | DescribeSuggesters | View | Yes |
| Amazon CloudSearch | DefineAnalysisScheme | Create | Yes |
| Amazon CloudSearch | UpdateDomainEndpointOptions | Edit | Yes |
| Amazon CloudSearch | IndexDocuments | Create | Yes |
| Amazon CloudSearch | DescribeDomainEndpointOptions | View | Yes |
| Amazon CloudSearch | UpdateAvailabilityOptions | Edit | Yes |
| Amazon CloudSearch | BuildSuggesters | Create | Yes |
| Amazon CloudSearch | UpdateScalingParameters | Edit | Yes |
| Amazon CloudSearch | DescribeAvailabilityOptions | View | Yes |
| Amazon CloudSearch | DeleteDomain | Delete | Yes |
| Amazon CloudSearch | DescribeServiceAccessPolicies | View | Yes |
| Amazon CloudSearch | DeleteSuggester | Delete | Yes |
| Amazon CloudSearch | DeleteAnalysisScheme | Delete | Yes |
| Amazon CloudSearch | DescribeIndexFields | View | Yes |
| Amazon CloudSearch | UpdateServiceAccessPolicies | Edit | Yes |
| Amazon CloudSearch | DescribeScalingParameters | View | Yes |
| Amazon CloudSearch | DescribeDomains | View | Yes |
| Amazon CloudTrail | AddTags | Create | Yes |
| Amazon CloudTrail | GetEventSelectors | View | Yes |
| Amazon CloudTrail | GetTrailStatus | View | Yes |
| Amazon CloudTrail | DescribeTrails | View | Yes |
| Amazon CloudTrail | PutEventSelectors | Edit | Yes |
| Amazon CloudTrail | StartLogging | Start | Yes |
| Amazon CloudTrail | CreateTrail | Create | Yes |
| Amazon CloudTrail | DeleteTrail | Delete | Yes |
| Amazon CloudTrail | LookupEvents | Create | Yes |
| Amazon CloudTrail | GetTrail | View | Yes |
| Amazon CloudTrail | GetInsightSelectors | View | Yes |
| Amazon CloudTrail | ListPublicKeys | View | Yes |
| Amazon CloudTrail | PutInsightSelectors | Edit | Yes |
| Amazon CloudTrail | RemoveTags | Delete | Yes |
| Amazon CloudTrail | UpdateTrail | Edit | Yes |
| Amazon CloudTrail | ListTags | View | Yes |
| Amazon CloudTrail | ListTrails | View | Yes |
| Amazon CloudTrail | StopLogging | Stop | Yes |
| Amazon CloudWatch | GetDashboard | View | Yes |
| Amazon CloudWatch | EnableAlarmActions | Enable | Yes |
| Amazon CloudWatch | DisableAlarmActions | Delete | Yes |
| Amazon CloudWatch | DescribeAlarmsForMetric | View | Yes |
| Amazon CloudWatch | ListTagsForResource | View | Yes |
| Amazon CloudWatch | PutAnomalyDetector | Edit | Yes |
| Amazon CloudWatch | DescribeAnomalyDetectors | View | Yes |
| Amazon CloudWatch | DeleteAnomalyDetector | Delete | Yes |
| Amazon CloudWatch | DescribeAlarms | View | Yes |
| Amazon CloudWatch | ListDashboards | View | Yes |
| Amazon CloudWatch | DeleteInsightRules | Delete | Yes |
| Amazon CloudWatch | GetMetricStream | View | Yes |
| Amazon CloudWatch | StopMetricStreams | Stop | Yes |
| Amazon CloudWatch | GetMetricWidgetImage | View | Yes |
| Amazon CloudWatch | PutMetricStream | Edit | Yes |
| Amazon CloudWatch | DescribeAlarmHistory | View | Yes |
| Amazon CloudWatch | GetMetricData | View | Yes |
| Amazon CloudWatch | DeleteDashboards | Delete | Yes |
| Amazon CloudWatch | PutCompositeAlarm | Edit | Yes |
| Amazon CloudWatch | PutInsightRule | Edit | Yes |
| Amazon CloudWatch | PutMetricAlarm | Edit | Yes |
| Amazon CloudWatch | PutDashboard | Edit | Yes |
| Amazon CloudWatch | StartMetricStreams | Start | Yes |
| Amazon CloudWatch | DeleteMetricStream | Delete | Yes |
| Amazon CloudWatch | UntagResource | Delete | Yes |
| Amazon CloudWatch | EnableInsightRules | Enable | Yes |
| Amazon CloudWatch | DescribeInsightRules | View | Yes |
| Amazon CloudWatch | SetAlarmState | Create | Yes |
| Amazon CloudWatch | GetInsightRuleReport | View | Yes |
| Amazon CloudWatch | GetMetricStatistics | View | Yes |
| Amazon CloudWatch | TagResource | Create | Yes |
| Amazon CloudWatch | PutMetricData | Edit | Yes |
| Amazon CloudWatch | DisableInsightRules | Delete | Yes |
| Amazon CloudWatch | DeleteAlarms | Delete | Yes |
| Amazon CloudWatch | ListMetricStreams | View | Yes |
| Amazon CloudWatch | ListMetrics | View | Yes |
| Amazon CloudWatch Application Insights | DescribeComponent | View | Yes |
| Amazon CloudWatch Application Insights | ListLogPatternSets | View | Yes |
| Amazon CloudWatch Application Insights | UntagResource | Delete | Yes |
| Amazon CloudWatch Application Insights | DescribeLogPattern | View | Yes |
| Amazon CloudWatch Application Insights | CreateComponent | Create | Yes |
| Amazon CloudWatch Application Insights | DescribeComponentConfigurationRecommendation | View | Yes |
| Amazon CloudWatch Application Insights | UpdateComponentConfiguration | Edit | Yes |
| Amazon CloudWatch Application Insights | ListConfigurationHistory | View | Yes |
| Amazon CloudWatch Application Insights | DescribeProblem | View | Yes |
| Amazon CloudWatch Application Insights | ListProblems | View | Yes |
| Amazon CloudWatch Application Insights | CreateLogPattern | Create | Yes |
| Amazon CloudWatch Application Insights | DescribeObservation | View | Yes |
| Amazon CloudWatch Application Insights | ListTagsForResource | View | Yes |
| Amazon CloudWatch Application Insights | ListApplications | View | Yes |
| Amazon CloudWatch Application Insights | DeleteApplication | Delete | Yes |
| Amazon CloudWatch Application Insights | DeleteComponent | Delete | Yes |
| Amazon CloudWatch Application Insights | DeleteLogPattern | Delete | Yes |
| Amazon CloudWatch Application Insights | CreateApplication | Create | Yes |
| Amazon CloudWatch Application Insights | ListComponents | View | Yes |
| Amazon CloudWatch Application Insights | TagResource | Create | Yes |
| Amazon CloudWatch Application Insights | DescribeApplication | View | Yes |
| Amazon CloudWatch Application Insights | DescribeProblemObservations | View | Yes |
| Amazon CloudWatch Application Insights | UpdateApplication | Edit | Yes |
| Amazon CloudWatch Application Insights | UpdateComponent | Edit | Yes |
| Amazon CloudWatch Application Insights | DescribeComponentConfiguration | View | Yes |
| Amazon CloudWatch Application Insights | ListLogPatterns | View | Yes |
| Amazon CloudWatch Application Insights | UpdateLogPattern | Edit | Yes |
| Amazon CloudWatch Events | DeletePartnerEventSource | Delete | Yes |
| Amazon CloudWatch Events | EnableRule | Enable | Yes |
| Amazon CloudWatch Events | DescribeArchive | View | Yes |
| Amazon CloudWatch Events | PutPartnerEvents | Edit | Yes |
| Amazon CloudWatch Events | UntagResource | Delete | Yes |
| Amazon CloudWatch Events | DescribeConnection | View | Yes |
| Amazon CloudWatch Events | PutPermission | Edit | Yes |
| Amazon CloudWatch Events | ListPartnerEventSources | View | Yes |
| Amazon CloudWatch Events | ListTargetsByRule | View | Yes |
| Amazon CloudWatch Events | TestEventPattern | Create | Yes |
| Amazon CloudWatch Events | DescribeRule | View | Yes |
| Amazon CloudWatch Events | ListRuleNamesByTarget | View | Yes |
| Amazon CloudWatch Events | ListEventSources | View | Yes |
| Amazon CloudWatch Events | DeauthorizeConnection | Create | Yes |
| Amazon CloudWatch Events | CreateApiDestination | Create | Yes |
| Amazon CloudWatch Events | CancelReplay | Delete | Yes |
| Amazon CloudWatch Events | RemovePermission | Delete | Yes |
| Amazon CloudWatch Events | DeleteEventBus | Delete | Yes |
| Amazon CloudWatch Events | DeleteConnection | Delete | Yes |
| Amazon CloudWatch Events | DeactivateEventSource | Deactivate | Yes |
| Amazon CloudWatch Events | RemoveTargets | Delete | Yes |
| Amazon CloudWatch Events | DeleteRule | Delete | Yes |
| Amazon CloudWatch Events | UpdateArchive | Edit | Yes |
| Amazon CloudWatch Events | DescribeApiDestination | View | Yes |
| Amazon CloudWatch Events | DescribeReplay | View | Yes |
| Amazon CloudWatch Events | ListRules | View | Yes |
| Amazon CloudWatch Events | ListArchives | View | Yes |
| Amazon CloudWatch Events | CreateEventBus | Create | Yes |
| Amazon CloudWatch Events | ListEventBuses | View | Yes |
| Amazon CloudWatch Events | PutRule | Edit | Yes |
| Amazon CloudWatch Events | CreateArchive | Create | Yes |
| Amazon CloudWatch Events | ListTagsForResource | View | Yes |
| Amazon CloudWatch Events | UpdateApiDestination | Edit | Yes |
| Amazon CloudWatch Events | DeleteApiDestination | Delete | Yes |
| Amazon CloudWatch Events | ListPartnerEventSourceAccounts | View | Yes |
| Amazon CloudWatch Events | DisableRule | Delete | Yes |
| Amazon CloudWatch Events | TagResource | Create | Yes |
| Amazon CloudWatch Events | CreateConnection | Create | Yes |
| Amazon CloudWatch Events | DescribeEventSource | View | Yes |
| Amazon CloudWatch Events | DeleteArchive | Delete | Yes |
| Amazon CloudWatch Events | CreatePartnerEventSource | Create | Yes |
| Amazon CloudWatch Events | StartReplay | Start | Yes |
| Amazon CloudWatch Events | UpdateConnection | Edit | Yes |
| Amazon CloudWatch Events | ListApiDestinations | View | Yes |
| Amazon CloudWatch Events | DescribeEventBus | View | Yes |
| Amazon CloudWatch Events | DescribePartnerEventSource | View | Yes |
| Amazon CloudWatch Events | PutTargets | Edit | Yes |
| Amazon CloudWatch Events | ListReplays | View | Yes |
| Amazon CloudWatch Events | ActivateEventSource | Activate | Yes |
| Amazon CloudWatch Events | PutEvents | Edit | Yes |
| Amazon CloudWatch Events | ListConnections | View | Yes |
| Amazon CloudWatch Logs | DescribeResourcePolicies | View | Yes |
| Amazon CloudWatch Logs | PutSubscriptionFilter | Edit | Yes |
| Amazon CloudWatch Logs | FilterLogEvents | Create | Yes |
| Amazon CloudWatch Logs | PutRetentionPolicy | Edit | Yes |
| Amazon CloudWatch Logs | DeleteRetentionPolicy | Delete | Yes |
| Amazon CloudWatch Logs | GetQueryResults | View | Yes |
| Amazon CloudWatch Logs | DescribeQueryDefinitions | View | Yes |
| Amazon CloudWatch Logs | DeleteDestination | Delete | Yes |
| Amazon CloudWatch Logs | TagLogGroup | Create | Yes |
| Amazon CloudWatch Logs | DescribeQueries | View | Yes |
| Amazon CloudWatch Logs | DisassociateKmsKey | Delete | Yes |
| Amazon CloudWatch Logs | DeleteQueryDefinition | Delete | Yes |
| Amazon CloudWatch Logs | StartQuery | Start | Yes |
| Amazon CloudWatch Logs | CreateExportTask | Create | Yes |
| Amazon CloudWatch Logs | DescribeLogGroups | View | Yes |
| Amazon CloudWatch Logs | AssociateKmsKey | Create | Yes |
| Amazon CloudWatch Logs | CreateLogGroup | Create | Yes |
| Amazon CloudWatch Logs | PutQueryDefinition | Edit | Yes |
| Amazon CloudWatch Logs | CancelExportTask | Delete | Yes |
| Amazon CloudWatch Logs | DeleteMetricFilter | Delete | Yes |
| Amazon CloudWatch Logs | DeleteSubscriptionFilter | Delete | Yes |
| Amazon CloudWatch Logs | DescribeLogStreams | View | Yes |
| Amazon CloudWatch Logs | StopQuery | Stop | Yes |
| Amazon CloudWatch Logs | GetLogEvents | View | Yes |
| Amazon CloudWatch Logs | PutLogEvents | Edit | Yes |
| Amazon CloudWatch Logs | UntagLogGroup | Delete | Yes |
| Amazon CloudWatch Logs | DescribeDestinations | View | Yes |
| Amazon CloudWatch Logs | DeleteResourcePolicy | Delete | Yes |
| Amazon CloudWatch Logs | DescribeExportTasks | View | Yes |
| Amazon CloudWatch Logs | TestMetricFilter | Create | Yes |
| Amazon CloudWatch Logs | CreateLogStream | Create | Yes |
| Amazon CloudWatch Logs | ListTagsLogGroup | View | Yes |
| Amazon CloudWatch Logs | DeleteLogStream | Delete | Yes |
| Amazon CloudWatch Logs | DescribeSubscriptionFilters | View | Yes |
| Amazon CloudWatch Logs | PutDestinationPolicy | Edit | Yes |
| Amazon CloudWatch Logs | PutResourcePolicy | Edit | Yes |
| Amazon CloudWatch Logs | PutMetricFilter | Edit | Yes |
| Amazon CloudWatch Logs | PutDestination | Edit | Yes |
| Amazon CloudWatch Logs | DeleteLogGroup | Delete | Yes |
| Amazon CloudWatch Logs | GetLogGroupFields | View | Yes |
| Amazon CloudWatch Logs | DescribeMetricFilters | View | Yes |
| Amazon CloudWatch Logs | GetLogRecord | View | Yes |
| Amazon Database Migration Service | RefreshSchemas | Create | Yes |
| Amazon Database Migration Service | StartReplicationTaskAssessmentRun | Start | Yes |
| Amazon Database Migration Service | CancelReplicationTaskAssessmentRun | Delete | Yes |
| Amazon Database Migration Service | MoveReplicationTask | Move | Yes |
| Amazon Database Migration Service | DescribeReplicationTaskAssessmentResults | View | Yes |
| Amazon Database Migration Service | ImportCertificate | Create | Yes |
| Amazon Database Migration Service | DescribeReplicationInstances | View | Yes |
| Amazon Database Migration Service | DescribeEndpoints | View | Yes |
| Amazon Database Migration Service | DescribeReplicationTaskIndividualAssessments | View | Yes |
| Amazon Database Migration Service | DeleteReplicationInstance | Delete | Yes |
| Amazon Database Migration Service | DeleteConnection | Delete | Yes |
| Amazon Database Migration Service | DescribeEndpointSettings | View | Yes |
| Amazon Database Migration Service | DescribeCertificates | View | Yes |
| Amazon Database Migration Service | DescribeReplicationInstanceTaskLogs | View | Yes |
| Amazon Database Migration Service | DeleteEndpoint | Delete | Yes |
| Amazon Database Migration Service | CreateReplicationInstance | Create | Yes |
| Amazon Database Migration Service | DescribeEventCategories | View | Yes |
| Amazon Database Migration Service | ListTagsForResource | View | Yes |
| Amazon Database Migration Service | DescribeEventSubscriptions | View | Yes |
| Amazon Database Migration Service | DescribeRefreshSchemasStatus | View | Yes |
| Amazon Database Migration Service | RebootReplicationInstance | Reboot | Yes |
| Amazon Database Migration Service | ModifyReplicationTask | Edit | Yes |
| Amazon Database Migration Service | CreateReplicationSubnetGroup | Create | Yes |
| Amazon Database Migration Service | StartReplicationTask | Start | Yes |
| Amazon Database Migration Service | StopReplicationTask | Stop | Yes |
| Amazon Database Migration Service | DescribeReplicationTasks | View | Yes |
| Amazon Database Migration Service | DeleteReplicationTask | Delete | Yes |
| Amazon Database Migration Service | ModifyEndpoint | Edit | Yes |
| Amazon Database Migration Service | StartReplicationTaskAssessment | Start | Yes |
| Amazon Database Migration Service | DescribeTableStatistics | View | Yes |
| Amazon Database Migration Service | DescribeAccountAttributes | View | Yes |
| Amazon Database Migration Service | DescribeEvents | View | Yes |
| Amazon Database Migration Service | DeleteCertificate | Delete | Yes |
| Amazon Database Migration Service | RemoveTagsFromResource | Delete | Yes |
| Amazon Database Migration Service | DeleteReplicationSubnetGroup | Delete | Yes |
| Amazon Database Migration Service | AddTagsToResource | Create | Yes |
| Amazon Database Migration Service | ReloadTables | Create | Yes |
| Amazon Database Migration Service | TestConnection | Create | Yes |
| Amazon Database Migration Service | DeleteEventSubscription | Delete | Yes |
| Amazon Database Migration Service | DescribeSchemas | View | Yes |
| Amazon Database Migration Service | ModifyReplicationSubnetGroup | Edit | Yes |
| Amazon Database Migration Service | DescribeReplicationSubnetGroups | View | Yes |
| Amazon Database Migration Service | DeleteReplicationTaskAssessmentRun | Delete | Yes |
| Amazon Database Migration Service | DescribeOrderableReplicationInstances | View | Yes |
| Amazon Database Migration Service | CreateEventSubscription | Create | Yes |
| Amazon Database Migration Service | DescribeApplicableIndividualAssessments | View | Yes |
| Amazon Database Migration Service | CreateEndpoint | Create | Yes |
| Amazon Database Migration Service | DescribeConnections | View | Yes |
| Amazon Database Migration Service | DescribeReplicationTaskAssessmentRuns | View | Yes |
| Amazon Database Migration Service | ModifyReplicationInstance | Edit | Yes |
| Amazon Database Migration Service | DescribeEndpointTypes | View | Yes |
| Amazon Database Migration Service | CreateReplicationTask | Create | Yes |
| Amazon Database Migration Service | DescribePendingMaintenanceActions | View | Yes |
| Amazon Database Migration Service | ApplyPendingMaintenanceAction | Edit | Yes |
| Amazon Database Migration Service | ModifyEventSubscription | Edit | Yes |
| Amazon Direct Connect | CreatePublicVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeLags | View | Yes |
| Amazon Direct Connect | DeleteDirectConnectGatewayAssociation | Delete | Yes |
| Amazon Direct Connect | AllocatePublicVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeConnectionLoa | View | Yes |
| Amazon Direct Connect | DeleteConnection | Delete | Yes |
| Amazon Direct Connect | CreateLag | Create | Yes |
| Amazon Direct Connect | DescribeVirtualGateways | View | Yes |
| Amazon Direct Connect | DescribeVirtualInterfaces | View | Yes |
| Amazon Direct Connect | DescribeDirectConnectGatewayAssociationProposals | View | Yes |
| Amazon Direct Connect | DescribeDirectConnectGatewayAssociations | View | Yes |
| Amazon Direct Connect | CreateDirectConnectGatewayAssociation | Create | Yes |
| Amazon Direct Connect | DescribeDirectConnectGateways | View | Yes |
| Amazon Direct Connect | DescribeTags | View | Yes |
| Amazon Direct Connect | DeleteBGPPeer | Delete | Yes |
| Amazon Direct Connect | StartBgpFailoverTest | Start | Yes |
| Amazon Direct Connect | DescribeConnectionsOnInterconnect | View | Yes |
| Amazon Direct Connect | ListVirtualInterfaceTestHistory | View | Yes |
| Amazon Direct Connect | AssociateHostedConnection | Create | Yes |
| Amazon Direct Connect | AcceptDirectConnectGatewayAssociationProposal | Approve | Yes |
| Amazon Direct Connect | UntagResource | Delete | Yes |
| Amazon Direct Connect | DisassociateConnectionFromLag | Delete | Yes |
| Amazon Direct Connect | DescribeLocations | View | Yes |
| Amazon Direct Connect | UpdateDirectConnectGatewayAssociation | Edit | Yes |
| Amazon Direct Connect | AllocateTransitVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeDirectConnectGatewayAttachments | View | Yes |
| Amazon Direct Connect | CreateDirectConnectGatewayAssociationProposal | Create | Yes |
| Amazon Direct Connect | CreateConnection | Create | Yes |
| Amazon Direct Connect | ConfirmPublicVirtualInterface | Create | Yes |
| Amazon Direct Connect | ConfirmPrivateVirtualInterface | Create | Yes |
| Amazon Direct Connect | UpdateConnection | Edit | Yes |
| Amazon Direct Connect | DescribeConnections | View | Yes |
| Amazon Direct Connect | DeleteVirtualInterface | Delete | Yes |
| Amazon Direct Connect | UpdateLag | Edit | Yes |
| Amazon Direct Connect | ConfirmTransitVirtualInterface | Create | Yes |
| Amazon Direct Connect | AllocateConnectionOnInterconnect | Create | Yes |
| Amazon Direct Connect | CreateBGPPeer | Create | Yes |
| Amazon Direct Connect | DeleteInterconnect | Delete | Yes |
| Amazon Direct Connect | DescribeInterconnectLoa | View | Yes |
| Amazon Direct Connect | DeleteDirectConnectGatewayAssociationProposal | Delete | Yes |
| Amazon Direct Connect | AssociateMacSecKey | Create | Yes |
| Amazon Direct Connect | CreateTransitVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeInterconnects | View | Yes |
| Amazon Direct Connect | AllocateHostedConnection | Create | Yes |
| Amazon Direct Connect | AssociateConnectionWithLag | Create | Yes |
| Amazon Direct Connect | ConfirmConnection | Create | Yes |
| Amazon Direct Connect | StopBgpFailoverTest | Stop | Yes |
| Amazon Direct Connect | CreateDirectConnectGateway | Create | Yes |
| Amazon Direct Connect | DeleteDirectConnectGateway | Delete | Yes |
| Amazon Direct Connect | DisassociateMacSecKey | Delete | Yes |
| Amazon Direct Connect | AllocatePrivateVirtualInterface | Create | Yes |
| Amazon Direct Connect | DescribeHostedConnections | View | Yes |
| Amazon Direct Connect | DeleteLag | Delete | Yes |
| Amazon Direct Connect | CreateInterconnect | Create | Yes |
| Amazon Direct Connect | DescribeLoa | View | Yes |
| Amazon Direct Connect | AssociateVirtualInterface | Create | Yes |
| Amazon Direct Connect | CreatePrivateVirtualInterface | Create | Yes |
| Amazon Direct Connect | TagResource | Create | Yes |
| Amazon Direct Connect | UpdateVirtualInterfaceAttributes | Edit | Yes |
| Amazon Directory Service | UpdateRadius | Edit | Yes |
| Amazon Directory Service | DescribeEventTopics | View | Yes |
| Amazon Directory Service | DescribeLDAPSSettings | View | Yes |
| Amazon Directory Service | DisableLDAPS | Delete | Yes |
| Amazon Directory Service | ListTagsForResource | View | Yes |
| Amazon Directory Service | EnableRadius | Enable | Yes |
| Amazon Directory Service | AcceptSharedDirectory | Approve | Yes |
| Amazon Directory Service | AddTagsToResource | Create | Yes |
| Amazon Directory Service | EnableSso | Enable | Yes |
| Amazon Directory Service | UnshareDirectory | Create | Yes |
| Amazon Directory Service | VerifyTrust | Create | Yes |
| Amazon Directory Service | RegisterEventTopic | Register | Yes |
| Amazon Directory Service | DeleteTrust | Delete | Yes |
| Amazon Directory Service | DeleteDirectory | Delete | Yes |
| Amazon Directory Service | ListSchemaExtensions | View | Yes |
| Amazon Directory Service | AddRegion | Create | Yes |
| Amazon Directory Service | EnableClientAuthentication | Enable | Yes |
| Amazon Directory Service | DescribeCertificate | View | Yes |
| Amazon Directory Service | ListLogSubscriptions | View | Yes |
| Amazon Directory Service | DeregisterEventTopic | Deregister | Yes |
| Amazon Directory Service | RejectSharedDirectory | Reject | Yes |
| Amazon Directory Service | RegisterCertificate | Register | Yes |
| Amazon Directory Service | UpdateConditionalForwarder | Edit | Yes |
| Amazon Directory Service | ListIpRoutes | View | Yes |
| Amazon Directory Service | DisableSso | Delete | Yes |
| Amazon Directory Service | RemoveRegion | Delete | Yes |
| Amazon Directory Service | DescribeSnapshots | View | Yes |
| Amazon Directory Service | DeleteLogSubscription | Delete | Yes |
| Amazon Directory Service | ListCertificates | View | Yes |
| Amazon Directory Service | CreateSnapshot | Create | Yes |
| Amazon Directory Service | DescribeRegions | View | Yes |
| Amazon Directory Service | RemoveTagsFromResource | Delete | Yes |
| Amazon Directory Service | DescribeDomainControllers | View | Yes |
| Amazon Directory Service | EnableLDAPS | Enable | Yes |
| Amazon Directory Service | UpdateNumberOfDomainControllers | Edit | Yes |
| Amazon Directory Service | DisableRadius | Delete | Yes |
| Amazon Directory Service | DescribeSharedDirectories | View | Yes |
| Amazon Directory Service | AddIpRoutes | Create | Yes |
| Amazon Directory Service | CreateMicrosoftAD | Create | Yes |
| Amazon Directory Service | RemoveIpRoutes | Delete | Yes |
| Amazon Directory Service | CancelSchemaExtension | Delete | Yes |
| Amazon Directory Service | DisableClientAuthentication | Delete | Yes |
| Amazon Directory Service | GetSnapshotLimits | View | Yes |
| Amazon Directory Service | DescribeConditionalForwarders | View | Yes |
| Amazon Directory Service | StartSchemaExtension | Start | Yes |
| Amazon Directory Service | ShareDirectory | Create | Yes |
| Amazon Directory Service | DescribeDirectories | View | Yes |
| Amazon Directory Service | DescribeTrusts | View | Yes |
| Amazon Directory Service | DeleteSnapshot | Delete | Yes |
| Amazon Directory Service | CreateConditionalForwarder | Create | Yes |
| Amazon Directory Service | UpdateTrust | Edit | Yes |
| Amazon Directory Service | ResetUserPassword | Edit | Yes |
| Amazon Directory Service | ConnectDirectory | Create | Yes |
| Amazon Directory Service | CreateLogSubscription | Create | Yes |
| Amazon Directory Service | CreateComputer | Create | Yes |
| Amazon Directory Service | RestoreFromSnapshot | Create | Yes |
| Amazon Directory Service | GetDirectoryLimits | View | Yes |
| Amazon Directory Service | DeregisterCertificate | Deregister | Yes |
| Amazon Directory Service | CreateTrust | Create | Yes |
| Amazon Directory Service | DeleteConditionalForwarder | Delete | Yes |
| Amazon Directory Service | CreateDirectory | Create | Yes |
| Amazon Directory Service | CreateAlias | Create | Yes |
| Amazon DynamoDB | UpdateTableReplicaAutoScaling | Edit | Yes |
| Amazon DynamoDB | UpdateContributorInsights | Edit | Yes |
| Amazon DynamoDB | DescribeContributorInsights | View | Yes |
| Amazon DynamoDB | Query | Create | Yes |
| Amazon DynamoDB | CreateTable | Create | Yes |
| Amazon DynamoDB | UpdateContinuousBackups | Edit | Yes |
| Amazon DynamoDB | RestoreTableToPointInTime | Create | Yes |
| Amazon DynamoDB | ListContributorInsights | View | Yes |
| Amazon DynamoDB | DescribeEndpoints | View | Yes |
| Amazon DynamoDB | DescribeTimeToLive | View | Yes |
| Amazon DynamoDB | ExecuteStatement | Create | Yes |
| Amazon DynamoDB | TagResource | Create | Yes |
| Amazon DynamoDB | ExportTableToPointInTime | View | Yes |
| Amazon DynamoDB | DisableKinesisStreamingDestination | Delete | Yes |
| Amazon DynamoDB | CreateBackup | Create | Yes |
| Amazon DynamoDB | DeleteBackup | Delete | Yes |
| Amazon DynamoDB | TransactGetItems | Create | Yes |
| Amazon DynamoDB | DescribeGlobalTable | View | Yes |
| Amazon DynamoDB | DeleteItem | Delete | Yes |
| Amazon DynamoDB | TransactWriteItems | Create | Yes |
| Amazon DynamoDB | DescribeTable | View | Yes |
| Amazon DynamoDB | DescribeLimits | View | Yes |
| Amazon DynamoDB | ListTagsOfResource | View | Yes |
| Amazon DynamoDB | EnableKinesisStreamingDestination | Enable | Yes |
| Amazon DynamoDB | DescribeGlobalTableSettings | View | Yes |
| Amazon DynamoDB | UpdateTimeToLive | Edit | Yes |
| Amazon DynamoDB | ListExports | View | Yes |
| Amazon DynamoDB | DescribeKinesisStreamingDestination | View | Yes |
| Amazon DynamoDB | ListTables | View | Yes |
| Amazon DynamoDB | ListBackups | View | Yes |
| Amazon DynamoDB | DescribeBackup | View | Yes |
| Amazon DynamoDB | UpdateItem | Edit | Yes |
| Amazon DynamoDB | Scan | Create | Yes |
| Amazon DynamoDB | DescribeTableReplicaAutoScaling | View | Yes |
| Amazon DynamoDB | DeleteTable | Delete | Yes |
| Amazon DynamoDB | CreateGlobalTable | Create | Yes |
| Amazon DynamoDB | GetItem | View | Yes |
| Amazon DynamoDB | UntagResource | Delete | Yes |
| Amazon DynamoDB | UpdateGlobalTableSettings | Edit | Yes |
| Amazon DynamoDB | UpdateTable | Edit | Yes |
| Amazon DynamoDB | DescribeExport | View | Yes |
| Amazon DynamoDB | ListGlobalTables | View | Yes |
| Amazon DynamoDB | RestoreTableFromBackup | Create | Yes |
| Amazon DynamoDB | ExecuteTransaction | Create | Yes |
| Amazon DynamoDB | PutItem | Edit | Yes |
| Amazon DynamoDB | WriteItem | Create | Yes |
| Amazon DynamoDB | UpdateGlobalTable | Edit | Yes |
| Amazon DynamoDB | DescribeContinuousBackups | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | DecreaseReplicationFactor | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeClusters | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | RebootNode | Reboot | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeEvents | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | CreateParameterGroup | Create | Yes |
| Amazon DynamoDB Accelerator (DAX) | CreateCluster | Create | Yes |
| Amazon DynamoDB Accelerator (DAX) | IncreaseReplicationFactor | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | UpdateSubnetGroup | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeParameterGroups | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | DeleteSubnetGroup | Delete | Yes |
| Amazon DynamoDB Accelerator (DAX) | UpdateCluster | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | DeleteCluster | Delete | Yes |
| Amazon DynamoDB Accelerator (DAX) | TagResource | Create | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeSubnetGroups | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | ListTags | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | DeleteParameterGroup | Delete | Yes |
| Amazon DynamoDB Accelerator (DAX) | UntagResource | Delete | Yes |
| Amazon DynamoDB Accelerator (DAX) | UpdateParameterGroup | Edit | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeParameters | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | DescribeDefaultParameters | View | Yes |
| Amazon DynamoDB Accelerator (DAX) | CreateSubnetGroup | Create | Yes |
| Amazon DynamoDB Streams | ListStreams | View | Yes |
| Amazon DynamoDB Streams | DescribeStream | View | Yes |
| Amazon DynamoDB Streams | GetShardIterator | View | Yes |
| Amazon DynamoDB Streams | GetRecords | View | Yes |
| Amazon EC2 | CreateRoute | Create | Yes |
| Amazon EC2 | RejectTransitGatewayVpcAttachment | Reject | Yes |
| Amazon EC2 | RegisterTransitGatewayMulticastGroupSources | Register | Yes |
| Amazon EC2 | GetTransitGatewayRouteTableAssociations | View | Yes |
| Amazon EC2 | AssignPrivateIpAddresses | Create | Yes |
| Amazon EC2 | CancelSpotInstanceRequests | Delete | Yes |
| Amazon EC2 | UnmonitorInstances | Edit | Yes |
| Amazon EC2 | DeleteVpnConnection | Delete | Yes |
| Amazon EC2 | ModifyManagedPrefixList | Edit | Yes |
| Amazon EC2 | CopySnapshot | Copy | Yes |
| Amazon EC2 | DeregisterImage | Deregister | Yes |
| Amazon EC2 | DeleteTrafficMirrorSession | Delete | Yes |
| Amazon EC2 | EnableVpcClassicLink | Enable | Yes |
| Amazon EC2 | CreateNetworkInterface | Create | Yes |
| Amazon EC2 | DisableEbsEncryptionByDefault | Delete | Yes |
| Amazon EC2 | DescribeVpcClassicLinkDnsSupport | View | Yes |
| Amazon EC2 | DeleteTags | Delete | Yes |
| Amazon EC2 | CreateTrafficMirrorFilterRule | Create | Yes |
| Amazon EC2 | CreateCustomerGateway | Create | Yes |
| Amazon EC2 | DescribePrincipalIdFormat | View | Yes |
| Amazon EC2 | DescribeVpcs | View | Yes |
| Amazon EC2 | CreateLaunchTemplate | Create | Yes |
| Amazon EC2 | DeleteSpotDatafeedSubscription | Delete | Yes |
| Amazon EC2 | CreateTags | Create | Yes |
| Amazon EC2 | ModifyVpnConnection | Edit | Yes |
| Amazon EC2 | ConfirmProductInstance | Create | Yes |
| Amazon EC2 | DescribeVpnConnections | View | Yes |
| Amazon EC2 | MoveAddressToVpc | Move | Yes |
| Amazon EC2 | DescribeNetworkInterfaceAttribute | View | Yes |
| Amazon EC2 | ModifyVpcPeeringConnectionOptions | Edit | Yes |
| Amazon EC2 | DescribeSpotPriceHistory | View | Yes |
| Amazon EC2 | ExportImage | View | Yes |
| Amazon EC2 | ModifyTransitGateway | Edit | Yes |
| Amazon EC2 | DisassociateEnclaveCertificateIamRole | Delete | Yes |
| Amazon EC2 | CreateClientVpnEndpoint | Create | Yes |
| Amazon EC2 | AttachNetworkInterface | Attach | Yes |
| Amazon EC2 | CancelImportTask | Delete | Yes |
| Amazon EC2 | DeleteQueuedReservedInstances | Delete | Yes |
| Amazon EC2 | DisassociateSubnetCidrBlock | Delete | Yes |
| Amazon EC2 | DescribeVpcAttribute | View | Yes |
| Amazon EC2 | CreateVpcEndpointServiceConfiguration | Create | Yes |
| Amazon EC2 | RevokeSecurityGroupIngress | Delete | Yes |
| Amazon EC2 | CreateFleet | Create | Yes |
| Amazon EC2 | ModifyVpnConnectionOptions | Edit | Yes |
| Amazon EC2 | DeleteTrafficMirrorFilterRule | Delete | Yes |
| Amazon EC2 | CreateLocalGatewayRouteTableVpcAssociation | Create | Yes |
| Amazon EC2 | ApplySecurityGroupsToClientVpnTargetNetwork | Edit | Yes |
| Amazon EC2 | DescribeAccountAttributes | View | Yes |
| Amazon EC2 | ModifyIdentityIdFormat | Edit | Yes |
| Amazon EC2 | CreateReservedInstancesListing | Create | Yes |
| Amazon EC2 | ReplaceRoute | Create | Yes |
| Amazon EC2 | AuthorizeSecurityGroupEgress | Create | Yes |
| Amazon EC2 | CreateTransitGatewayConnect | Create | Yes |
| Amazon EC2 | DescribeClassicLinkInstances | View | Yes |
| Amazon EC2 | DeleteNetworkAclEntry | Delete | Yes |
| Amazon EC2 | DescribeAvailabilityZones | View | Yes |
| Amazon EC2 | DescribeVolumeAttribute | View | Yes |
| Amazon EC2 | DeleteDhcpOptions | Delete | Yes |
| Amazon EC2 | CreateNatGateway | Create | Yes |
| Amazon EC2 | DeleteClientVpnEndpoint | Delete | Yes |
| Amazon EC2 | RegisterImage | Register | Yes |
| Amazon EC2 | CreateNetworkAclEntry | Create | Yes |
| Amazon EC2 | DeleteRouteTable | Delete | Yes |
| Amazon EC2 | DescribePublicIpvPools | View | Yes |
| Amazon EC2 | ModifyVpcEndpointServiceConfiguration | Edit | Yes |
| Amazon EC2 | CreateTransitGateway | Create | Yes |
| Amazon EC2 | DeleteTransitGateway | Delete | Yes |
| Amazon EC2 | AssociateTransitGatewayMulticastDomain | Create | Yes |
| Amazon EC2 | ModifyCapacityReservation | Edit | Yes |
| Amazon EC2 | CreateStoreImageTask | Create | Yes |
| Amazon EC2 | PurchaseScheduledInstances | Purchase | Yes |
| Amazon EC2 | ModifyVpcEndpoint | Edit | Yes |
| Amazon EC2 | CreateRouteTable | Create | Yes |
| Amazon EC2 | DescribeConversionTasks | View | Yes |
| Amazon EC2 | DescribeAggregateIdFormat | View | Yes |
| Amazon EC2 | DescribeEgressOnlyInternetGateways | View | Yes |
| Amazon EC2 | DeleteVpcEndpointServiceConfigurations | Delete | Yes |
| Amazon EC2 | DescribeSpotDatafeedSubscription | View | Yes |
| Amazon EC2 | DescribeMovingAddresses | View | Yes |
| Amazon EC2 | DescribeIdentityIdFormat | View | Yes |
| Amazon EC2 | DescribeExportTasks | View | Yes |
| Amazon EC2 | DescribeFleetHistory | View | Yes |
| Amazon EC2 | DescribeSecurityGroupReferences | View | Yes |
| Amazon EC2 | DescribeTransitGatewayPeeringAttachments | View | Yes |
| Amazon EC2 | CreateSecurityGroup | Create | Yes |
| Amazon EC2 | DeleteLocalGatewayRouteTableVpcAssociation | Delete | Yes |
| Amazon EC2 | DeleteTransitGatewayMulticastDomain | Delete | Yes |
| Amazon EC2 | CreateTransitGatewayPrefixListReference | Create | Yes |
| Amazon EC2 | CreateKeyPair | Create | Yes |
| Amazon EC2 | ModifyVpcEndpointConnectionNotification | Edit | Yes |
| Amazon EC2 | DescribeCustomerGateways | View | Yes |
| Amazon EC2 | UnassignIpvAddresses | Edit | Yes |
| Amazon EC2 | ModifyVpnTunnelCertificate | Edit | Yes |
| Amazon EC2 | CreateTrafficMirrorTarget | Create | Yes |
| Amazon EC2 | CreateVpcPeeringConnection | Create | Yes |
| Amazon EC2 | GetLaunchTemplateData | View | Yes |
| Amazon EC2 | CancelExportTask | Delete | Yes |
| Amazon EC2 | AcceptReservedInstancesExchangeQuote | Approve | Yes |
| Amazon EC2 | ReplaceIamInstanceProfileAssociation | Create | Yes |
| Amazon EC2 | CreateVpnConnection | Create | Yes |
| Amazon EC2 | GetManagedPrefixListEntries | View | Yes |
| Amazon EC2 | DeleteNatGateway | Delete | Yes |
| Amazon EC2 | TerminateInstances | Terminate | Yes |
| Amazon EC2 | AttachClassicLinkVpc | Attach | Yes |
| Amazon EC2 | DescribeAddressesAttribute | View | Yes |
| Amazon EC2 | CancelSpotFleetRequests | Delete | Yes |
| Amazon EC2 | ModifyInstanceMetadataOptions | Edit | Yes |
| Amazon EC2 | GetCapacityReservationUsage | View | Yes |
| Amazon EC2 | DescribeFlowLogs | View | Yes |
| Amazon EC2 | UnassignPrivateIpAddresses | Edit | Yes |
| Amazon EC2 | DescribeScheduledInstanceAvailability | View | Yes |
| Amazon EC2 | CreateReplaceRootVolumeTask | Create | Yes |
| Amazon EC2 | DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations | View | Yes |
| Amazon EC2 | CreateVpcEndpoint | Create | Yes |
| Amazon EC2 | UpdateSecurityGroupRuleDescriptionsIngress | Edit | Yes |
| Amazon EC2 | RequestSpotFleet | Create | Yes |
| Amazon EC2 | DescribeStoreImageTasks | View | Yes |
| Amazon EC2 | ModifyNetworkInterfaceAttribute | Edit | Yes |
| Amazon EC2 | ModifyVpnTunnelOptions | Edit | Yes |
| Amazon EC2 | DescribeFpgaImages | View | Yes |
| Amazon EC2 | DescribeSpotFleetRequests | View | Yes |
| Amazon EC2 | DescribeVpcEndpointServiceConfigurations | View | Yes |
| Amazon EC2 | CreateDhcpOptions | Create | Yes |
| Amazon EC2 | ImportSnapshot | Create | Yes |
| Amazon EC2 | CreateTransitGatewayRouteTable | Create | Yes |
| Amazon EC2 | ModifySpotFleetRequest | Edit | Yes |
| Amazon EC2 | CreateSubnet | Create | Yes |
| Amazon EC2 | AssociateEnclaveCertificateIamRole | Create | Yes |
| Amazon EC2 | CreateLocalGatewayRoute | Create | Yes |
| Amazon EC2 | DescribeSpotFleetInstances | View | Yes |
| Amazon EC2 | ExportClientVpnClientConfiguration | View | Yes |
| Amazon EC2 | EnableVpcClassicLinkDnsSupport | Enable | Yes |
| Amazon EC2 | DescribeVolumes | View | Yes |
| Amazon EC2 | DeleteFlowLogs | Delete | Yes |
| Amazon EC2 | ImportInstance | Create | Yes |
| Amazon EC2 | DescribeClientVpnConnections | View | Yes |
| Amazon EC2 | ModifyInstanceEventStartTime | Edit | Yes |
| Amazon EC2 | DescribeCapacityReservations | View | Yes |
| Amazon EC2 | RejectTransitGatewayMulticastDomainAssociations | Reject | Yes |
| Amazon EC2 | DescribeTrafficMirrorTargets | View | Yes |
| Amazon EC2 | ReplaceRouteTableAssociation | Create | Yes |
| Amazon EC2 | DeregisterInstanceEventNotificationAttributes | Deregister | Yes |
| Amazon EC2 | DeletePlacementGroup | Delete | Yes |
| Amazon EC2 | DescribeTransitGatewayConnectPeers | View | Yes |
| Amazon EC2 | DescribeElasticGpus | View | Yes |
| Amazon EC2 | DescribeIdFormat | View | Yes |
| Amazon EC2 | CreateVpc | Create | Yes |
| Amazon EC2 | ModifyClientVpnEndpoint | Edit | Yes |
| Amazon EC2 | GetTransitGatewayRouteTablePropagations | View | Yes |
| Amazon EC2 | CreateNetworkAcl | Create | Yes |
| Amazon EC2 | CopyFpgaImage | Copy | Yes |
| Amazon EC2 | DescribeFastSnapshotRestores | View | Yes |
| Amazon EC2 | StartVpcEndpointServicePrivateDnsVerification | Start | Yes |
| Amazon EC2 | AttachInternetGateway | Attach | Yes |
| Amazon EC2 | DescribeVpcEndpointServices | View | Yes |
| Amazon EC2 | RevokeClientVpnIngress | Delete | Yes |
| Amazon EC2 | CreateVolume | Create | Yes |
| Amazon EC2 | DescribeSecurityGroups | View | Yes |
| Amazon EC2 | DisassociateIamInstanceProfile | Delete | Yes |
| Amazon EC2 | CreateCarrierGateway | Create | Yes |
| Amazon EC2 | DescribeImportSnapshotTasks | View | Yes |
| Amazon EC2 | DeleteLaunchTemplate | Delete | Yes |
| Amazon EC2 | DeleteVpc | Delete | Yes |
| Amazon EC2 | CreateTransitGatewayVpcAttachment | Create | Yes |
| Amazon EC2 | DescribeInstanceEventNotificationAttributes | View | Yes |
| Amazon EC2 | ReplaceNetworkAclAssociation | Create | Yes |
| Amazon EC2 | ResetAddressAttribute | Edit | Yes |
| Amazon EC2 | DetachVolume | Delete | Yes |
| Amazon EC2 | CreateTransitGatewayRoute | Create | Yes |
| Amazon EC2 | DescribeNetworkInsightsPaths | View | Yes |
| Amazon EC2 | RestoreAddressToClassic | Create | Yes |
| Amazon EC2 | GetTransitGatewayPrefixListReferences | View | Yes |
| Amazon EC2 | DescribeImageAttribute | View | Yes |
| Amazon EC2 | GetConsoleScreenshot | View | Yes |
| Amazon EC2 | DeleteTransitGatewayPeeringAttachment | Delete | Yes |
| Amazon EC2 | AssignIpvAddresses | Create | Yes |
| Amazon EC2 | DescribeVolumesModifications | View | Yes |
| Amazon EC2 | SearchTransitGatewayMulticastGroups | Search | Yes |
| Amazon EC2 | DescribeInstanceCreditSpecifications | View | Yes |
| Amazon EC2 | CreateLaunchTemplateVersion | Create | Yes |
| Amazon EC2 | GetReservedInstancesExchangeQuote | View | Yes |
| Amazon EC2 | AssociateRouteTable | Create | Yes |
| Amazon EC2 | StopInstances | Stop | Yes |
| Amazon EC2 | DescribeVpcEndpointConnectionNotifications | View | Yes |
| Amazon EC2 | DeleteTransitGatewayPrefixListReference | Delete | Yes |
| Amazon EC2 | DescribeVpcClassicLink | View | Yes |
| Amazon EC2 | ImportClientVpnClientCertificateRevocationList | Create | Yes |
| Amazon EC2 | DescribeFleets | View | Yes |
| Amazon EC2 | DeleteNetworkInsightsAnalysis | Delete | Yes |
| Amazon EC2 | CancelCapacityReservation | Delete | Yes |
| Amazon EC2 | DescribeTransitGatewayVpcAttachments | View | Yes |
| Amazon EC2 | RunInstances | Create | Yes |
| Amazon EC2 | GetHostReservationPurchasePreview | View | Yes |
| Amazon EC2 | DeleteClientVpnRoute | Delete | Yes |
| Amazon EC2 | DescribeInstances | View | Yes |
| Amazon EC2 | DescribeHosts | View | Yes |
| Amazon EC2 | AdvertiseByoipCidr | Create | Yes |
| Amazon EC2 | ModifyTransitGatewayVpcAttachment | Edit | Yes |
| Amazon EC2 | ReleaseAddress | Create | Yes |
| Amazon EC2 | ModifyLaunchTemplate | Edit | Yes |
| Amazon EC2 | DescribeLocalGateways | View | Yes |
| Amazon EC2 | GetDefaultCreditSpecification | View | Yes |
| Amazon EC2 | DescribeSnapshots | View | Yes |
| Amazon EC2 | DescribeInstanceTypes | View | Yes |
| Amazon EC2 | DisableVpcClassicLink | Delete | Yes |
| Amazon EC2 | ModifyHosts | Edit | Yes |
| Amazon EC2 | ResetFpgaImageAttribute | Edit | Yes |
| Amazon EC2 | ModifyTrafficMirrorSession | Edit | Yes |
| Amazon EC2 | EnableSerialConsoleAccess | Enable | Yes |
| Amazon EC2 | ResetInstanceAttribute | Edit | Yes |
| Amazon EC2 | PurchaseReservedInstancesOffering | Purchase | Yes |
| Amazon EC2 | DescribeBundleTasks | View | Yes |
| Amazon EC2 | DescribeTransitGatewayConnects | View | Yes |
| Amazon EC2 | DescribeAddresses | View | Yes |
| Amazon EC2 | DeleteNetworkInterface | Delete | Yes |
| Amazon EC2 | RejectVpcEndpointConnections | Reject | Yes |
| Amazon EC2 | GetTransitGatewayMulticastDomainAssociations | View | Yes |
| Amazon EC2 | DescribeTransitGatewayAttachments | View | Yes |
| Amazon EC2 | CreateRestoreImageTask | Create | Yes |
| Amazon EC2 | DescribeReservedInstances | View | Yes |
| Amazon EC2 | GetPasswordData | View | Yes |
| Amazon EC2 | DeleteTransitGatewayRoute | Delete | Yes |
| Amazon EC2 | DisassociateVpcCidrBlock | Delete | Yes |
| Amazon EC2 | ModifyTrafficMirrorFilterNetworkServices | Edit | Yes |
| Amazon EC2 | CreateVpnGateway | Create | Yes |
| Amazon EC2 | GetEbsDefaultKmsKeyId | View | Yes |
| Amazon EC2 | DeprovisionByoipCidr | Create | Yes |
| Amazon EC2 | DeleteVpnConnectionRoute | Delete | Yes |
| Amazon EC2 | ResetNetworkInterfaceAttribute | Edit | Yes |
| Amazon EC2 | DescribeInternetGateways | View | Yes |
| Amazon EC2 | DescribeTransitGatewayMulticastDomains | View | Yes |
| Amazon EC2 | DisableFastSnapshotRestores | Delete | Yes |
| Amazon EC2 | DescribeClientVpnAuthorizationRules | View | Yes |
| Amazon EC2 | DeleteSubnet | Delete | Yes |
| Amazon EC2 | DeleteRoute | Delete | Yes |
| Amazon EC2 | CreateManagedPrefixList | Create | Yes |
| Amazon EC2 | GetTransitGatewayAttachmentPropagations | View | Yes |
| Amazon EC2 | DescribeTransitGatewayRouteTables | View | Yes |
| Amazon EC2 | CreateTrafficMirrorSession | Create | Yes |
| Amazon EC2 | DescribeTrafficMirrorSessions | View | Yes |
| Amazon EC2 | GetAssociatedIpvPoolCidrs | View | Yes |
| Amazon EC2 | DescribeNatGateways | View | Yes |
| Amazon EC2 | DescribeSpotFleetRequestHistory | View | Yes |
| Amazon EC2 | DescribeVolumeStatus | View | Yes |
| Amazon EC2 | DescribeInstanceStatus | View | Yes |
| Amazon EC2 | DescribeLaunchTemplateVersions | View | Yes |
| Amazon EC2 | DescribeLocalGatewayVirtualInterfaces | View | Yes |
| Amazon EC2 | DisassociateTransitGatewayRouteTable | Delete | Yes |
| Amazon EC2 | GetGroupsForCapacityReservation | View | Yes |
| Amazon EC2 | DisableVgwRoutePropagation | Delete | Yes |
| Amazon EC2 | DeleteNetworkInterfacePermission | Delete | Yes |
| Amazon EC2 | DescribeSpotInstanceRequests | View | Yes |
| Amazon EC2 | SendDiagnosticInterrupt | Send | Yes |
| Amazon EC2 | CreateSnapshots | Create | Yes |
| Amazon EC2 | ModifyVolumeAttribute | Edit | Yes |
| Amazon EC2 | GetSerialConsoleAccessStatus | View | Yes |
| Amazon EC2 | DescribeInstanceAttribute | View | Yes |
| Amazon EC2 | ModifyVpcEndpointServicePermissions | Edit | Yes |
| Amazon EC2 | AssociateAddress | Create | Yes |
| Amazon EC2 | ImportKeyPair | Create | Yes |
| Amazon EC2 | DeleteVpnGateway | Delete | Yes |
| Amazon EC2 | DeleteTrafficMirrorTarget | Delete | Yes |
| Amazon EC2 | DescribeExportImageTasks | View | Yes |
| Amazon EC2 | DescribeRouteTables | View | Yes |
| Amazon EC2 | DescribeDhcpOptions | View | Yes |
| Amazon EC2 | CreatePlacementGroup | Create | Yes |
| Amazon EC2 | DeleteKeyPair | Delete | Yes |
| Amazon EC2 | DescribeClientVpnEndpoints | View | Yes |
| Amazon EC2 | GetCoipPoolUsage | View | Yes |
| Amazon EC2 | ModifyVpcAttribute | Edit | Yes |
| Amazon EC2 | DeleteEgressOnlyInternetGateway | Delete | Yes |
| Amazon EC2 | DeleteNetworkInsightsPath | Delete | Yes |
| Amazon EC2 | DeleteTransitGatewayRouteTable | Delete | Yes |
| Amazon EC2 | DescribeVpnGateways | View | Yes |
| Amazon EC2 | DeleteTrafficMirrorFilter | Delete | Yes |
| Amazon EC2 | DeleteNetworkAcl | Delete | Yes |
| Amazon EC2 | TerminateClientVpnConnections | Terminate | Yes |
| Amazon EC2 | DisableVpcClassicLinkDnsSupport | Delete | Yes |
| Amazon EC2 | AssociateClientVpnTargetNetwork | Create | Yes |
| Amazon EC2 | DescribeTags | View | Yes |
| Amazon EC2 | DescribeKeyPairs | View | Yes |
| Amazon EC2 | AssociateIamInstanceProfile | Create | Yes |
| Amazon EC2 | AcceptVpcPeeringConnection | Approve | Yes |
| Amazon EC2 | AuthorizeClientVpnIngress | Create | Yes |
| Amazon EC2 | DisassociateAddress | Delete | Yes |
| Amazon EC2 | DeregisterTransitGatewayMulticastGroupSources | Deregister | Yes |
| Amazon EC2 | DescribeVpcEndpointServicePermissions | View | Yes |
| Amazon EC2 | EnableVolumeIO | Enable | Yes |
| Amazon EC2 | ModifyInstanceCreditSpecification | Edit | Yes |
| Amazon EC2 | DescribeInstanceTypeOfferings | View | Yes |
| Amazon EC2 | DeleteManagedPrefixList | Delete | Yes |
| Amazon EC2 | AllocateAddress | Create | Yes |
| Amazon EC2 | ModifyAvailabilityZoneGroup | Edit | Yes |
| Amazon EC2 | DescribeLaunchTemplates | View | Yes |
| Amazon EC2 | MonitorInstances | Create | Yes |
| Amazon EC2 | CreateVpcEndpointConnectionNotification | Create | Yes |
| Amazon EC2 | DeleteLocalGatewayRoute | Delete | Yes |
| Amazon EC2 | SearchTransitGatewayRoutes | Search | Yes |
| Amazon EC2 | DescribeVpcEndpoints | View | Yes |
| Amazon EC2 | DescribeFleetInstances | View | Yes |
| Amazon EC2 | ModifyIdFormat | Edit | Yes |
| Amazon EC2 | ModifyInstanceAttribute | Edit | Yes |
| Amazon EC2 | UpdateSecurityGroupRuleDescriptionsEgress | Edit | Yes |
| Amazon EC2 | CreateTransitGatewayConnectPeer | Create | Yes |
| Amazon EC2 | DescribeLocalGatewayRouteTableVpcAssociations | View | Yes |
| Amazon EC2 | DescribeNetworkAcls | View | Yes |
| Amazon EC2 | ModifySubnetAttribute | Edit | Yes |
| Amazon EC2 | ModifyFleet | Edit | Yes |
| Amazon EC2 | EnableTransitGatewayRouteTablePropagation | Enable | Yes |
| Amazon EC2 | ModifyAddressAttribute | Edit | Yes |
| Amazon EC2 | DescribeCarrierGateways | View | Yes |
| Amazon EC2 | ResetEbsDefaultKmsKeyId | Edit | Yes |
| Amazon EC2 | DeleteLaunchTemplateVersions | Delete | Yes |
| Amazon EC2 | CreateInstanceExportTask | Create | Yes |
| Amazon EC2 | DescribeFpgaImageAttribute | View | Yes |
| Amazon EC2 | DeleteCustomerGateway | Delete | Yes |
| Amazon EC2 | DeleteInternetGateway | Delete | Yes |
| Amazon EC2 | DescribeCoipPools | View | Yes |
| Amazon EC2 | PurchaseHostReservation | Purchase | Yes |
| Amazon EC2 | DeleteCarrierGateway | Delete | Yes |
| Amazon EC2 | EnableFastSnapshotRestores | Enable | Yes |
| Amazon EC2 | GetAssociatedEnclaveCertificateIamRoles | View | Yes |
| Amazon EC2 | DescribeManagedPrefixLists | View | Yes |
| Amazon EC2 | DescribePrefixLists | View | Yes |
| Amazon EC2 | DescribeIpvPools | View | Yes |
| Amazon EC2 | ModifyFpgaImageAttribute | Edit | Yes |
| Amazon EC2 | ModifyEbsDefaultKmsKeyId | Edit | Yes |
| Amazon EC2 | CreateCapacityReservation | Create | Yes |
| Amazon EC2 | DeleteTransitGatewayVpcAttachment | Delete | Yes |
| Amazon EC2 | DescribeReservedInstancesOfferings | View | Yes |
| Amazon EC2 | DescribeClientVpnTargetNetworks | View | Yes |
| Amazon EC2 | CopyImage | Copy | Yes |
| Amazon EC2 | RejectTransitGatewayPeeringAttachment | Reject | Yes |
| Amazon EC2 | DeleteVpcEndpoints | Delete | Yes |
| Amazon EC2 | DeleteVolume | Delete | Yes |
| Amazon EC2 | CreateDefaultVpc | Create | Yes |
| Amazon EC2 | DisassociateRouteTable | Delete | Yes |
| Amazon EC2 | ModifyInstancePlacement | Edit | Yes |
| Amazon EC2 | ModifyReservedInstances | Edit | Yes |
| Amazon EC2 | DescribeReservedInstancesModifications | View | Yes |
| Amazon EC2 | DescribeClientVpnRoutes | View | Yes |
| Amazon EC2 | ResetSnapshotAttribute | Edit | Yes |
| Amazon EC2 | BundleInstance | Create | Yes |
| Amazon EC2 | DescribeIamInstanceProfileAssociations | View | Yes |
| Amazon EC2 | DeregisterTransitGatewayMulticastGroupMembers | Deregister | Yes |
| Amazon EC2 | AcceptTransitGatewayMulticastDomainAssociations | Approve | Yes |
| Amazon EC2 | DeleteVpcPeeringConnection | Delete | Yes |
| Amazon EC2 | DeleteSnapshot | Delete | Yes |
| Amazon EC2 | ModifyVolume | Edit | Yes |
| Amazon EC2 | ModifyTransitGatewayPrefixListReference | Edit | Yes |
| Amazon EC2 | AuthorizeSecurityGroupIngress | Create | Yes |
| Amazon EC2 | CreateTrafficMirrorFilter | Create | Yes |
| Amazon EC2 | ModifyInstanceCapacityReservationAttributes | Edit | Yes |
| Amazon EC2 | DetachNetworkInterface | Delete | Yes |
| Amazon EC2 | ExportClientVpnClientCertificateRevocationList | View | Yes |
| Amazon EC2 | DeleteVpcEndpointConnectionNotifications | Delete | Yes |
| Amazon EC2 | GetFlowLogsIntegrationTemplate | View | Yes |
| Amazon EC2 | RegisterInstanceEventNotificationAttributes | Register | Yes |
| Amazon EC2 | RebootInstances | Reboot | Yes |
| Amazon EC2 | CancelBundleTask | Delete | Yes |
| Amazon EC2 | CreateImage | Create | Yes |
| Amazon EC2 | DescribeNetworkInterfaces | View | Yes |
| Amazon EC2 | GetManagedPrefixListAssociations | View | Yes |
| Amazon EC2 | RevokeSecurityGroupEgress | Delete | Yes |
| Amazon EC2 | DescribeNetworkInterfacePermissions | View | Yes |
| Amazon EC2 | CreateInternetGateway | Create | Yes |
| Amazon EC2 | DescribeImages | View | Yes |
| Amazon EC2 | CancelConversionTask | Delete | Yes |
| Amazon EC2 | StartNetworkInsightsAnalysis | Start | Yes |
| Amazon EC2 | CreateVpnConnectionRoute | Create | Yes |
| Amazon EC2 | DescribeHostReservations | View | Yes |
| Amazon EC2 | ProvisionByoipCidr | Create | Yes |
| Amazon EC2 | DetachVpnGateway | Delete | Yes |
| Amazon EC2 | DescribeTransitGateways | View | Yes |
| Amazon EC2 | SearchLocalGatewayRoutes | Search | Yes |
| Amazon EC2 | ReleaseHosts | Create | Yes |
| Amazon EC2 | AttachVolume | Attach | Yes |
| Amazon EC2 | DescribeTrafficMirrorFilters | View | Yes |
| Amazon EC2 | CreateNetworkInsightsPath | Create | Yes |
| Amazon EC2 | DisassociateTransitGatewayMulticastDomain | Delete | Yes |
| Amazon EC2 | CreateFpgaImage | Create | Yes |
| Amazon EC2 | DescribeRegions | View | Yes |
| Amazon EC2 | EnableEbsEncryptionByDefault | Enable | Yes |
| Amazon EC2 | AcceptVpcEndpointConnections | Approve | Yes |
| Amazon EC2 | DeleteFpgaImage | Delete | Yes |
| Amazon EC2 | DescribeByoipCidrs | View | Yes |
| Amazon EC2 | GetEbsEncryptionByDefault | View | Yes |
| Amazon EC2 | DescribeImportImageTasks | View | Yes |
| Amazon EC2 | DescribeScheduledInstances | View | Yes |
| Amazon EC2 | CreateTransitGatewayPeeringAttachment | Create | Yes |
| Amazon EC2 | RegisterTransitGatewayMulticastGroupMembers | Register | Yes |
| Amazon EC2 | ModifyTrafficMirrorFilterRule | Edit | Yes |
| Amazon EC2 | ReplaceTransitGatewayRoute | Create | Yes |
| Amazon EC2 | CreateFlowLogs | Create | Yes |
| Amazon EC2 | ModifySnapshotAttribute | Edit | Yes |
| Amazon EC2 | CreateSnapshot | Create | Yes |
| Amazon EC2 | ExportTransitGatewayRoutes | View | Yes |
| Amazon EC2 | DescribeHostReservationOfferings | View | Yes |
| Amazon EC2 | AssociateDhcpOptions | Create | Yes |
| Amazon EC2 | RequestSpotInstances | Create | Yes |
| Amazon EC2 | DescribeNetworkInsightsAnalyses | View | Yes |
| Amazon EC2 | DescribeReservedInstancesListings | View | Yes |
| Amazon EC2 | CreateNetworkInterfacePermission | Create | Yes |
| Amazon EC2 | ImportImage | Create | Yes |
| Amazon EC2 | WithdrawByoipCidr | Create | Yes |
| Amazon EC2 | DisassociateClientVpnTargetNetwork | Delete | Yes |
| Amazon EC2 | DeleteTransitGatewayConnectPeer | Delete | Yes |
| Amazon EC2 | AttachVpnGateway | Attach | Yes |
| Amazon EC2 | AcceptTransitGatewayPeeringAttachment | Approve | Yes |
| Amazon EC2 | CreateEgressOnlyInternetGateway | Create | Yes |
| Amazon EC2 | ModifyImageAttribute | Edit | Yes |
| Amazon EC2 | AssociateSubnetCidrBlock | Create | Yes |
| Amazon EC2 | DeleteSecurityGroup | Delete | Yes |
| Amazon EC2 | ModifyVpcTenancy | Edit | Yes |
| Amazon EC2 | CreateDefaultSubnet | Create | Yes |
| Amazon EC2 | DescribeReplaceRootVolumeTasks | View | Yes |
| Amazon EC2 | DescribeLocalGatewayRouteTables | View | Yes |
| Amazon EC2 | ReportInstanceStatus | Create | Yes |
| Amazon EC2 | DetachInternetGateway | Delete | Yes |
| Amazon EC2 | DescribeSubnets | View | Yes |
| Amazon EC2 | CreateTransitGatewayMulticastDomain | Create | Yes |
| Amazon EC2 | ReplaceNetworkAclEntry | Create | Yes |
| Amazon EC2 | DeleteFleets | Delete | Yes |
| Amazon EC2 | DisableSerialConsoleAccess | Delete | Yes |
| Amazon EC2 | DescribeStaleSecurityGroups | View | Yes |
| Amazon EC2 | RejectVpcPeeringConnection | Reject | Yes |
| Amazon EC2 | DescribeVpcEndpointConnections | View | Yes |
| Amazon EC2 | CancelReservedInstancesListing | Delete | Yes |
| Amazon EC2 | AllocateHosts | Create | Yes |
| Amazon EC2 | DisableTransitGatewayRouteTablePropagation | Delete | Yes |
| Amazon EC2 | DescribeLocalGatewayVirtualInterfaceGroups | View | Yes |
| Amazon EC2 | DetachClassicLinkVpc | Delete | Yes |
| Amazon EC2 | EnableVgwRoutePropagation | Enable | Yes |
| Amazon EC2 | CreateClientVpnRoute | Create | Yes |
| Amazon EC2 | CreateSpotDatafeedSubscription | Create | Yes |
| Amazon EC2 | ResetImageAttribute | Edit | Yes |
| Amazon EC2 | AssociateVpcCidrBlock | Create | Yes |
| Amazon EC2 | GetConsoleOutput | View | Yes |
| Amazon EC2 | AcceptTransitGatewayVpcAttachment | Approve | Yes |
| Amazon EC2 | DeleteTransitGatewayConnect | Delete | Yes |
| Amazon EC2 | DescribeVpcPeeringConnections | View | Yes |
| Amazon EC2 | RunScheduledInstances | Create | Yes |
| Amazon EC2 | AssociateTransitGatewayRouteTable | Create | Yes |
| Amazon EC2 | DescribePlacementGroups | View | Yes |
| Amazon EC2 | RestoreManagedPrefixListVersion | Create | Yes |
| Amazon EC2 | StartInstances | Start | Yes |
| Amazon EC2 | DescribeSnapshotAttribute | View | Yes |
| Amazon EC2 | ImportVolume | Create | Yes |
| Amazon EC2 | ModifyDefaultCreditSpecification | Edit | Yes |
| Amazon EC2 Container Service | SubmitAttachmentStateChanges | Create | Yes |
| Amazon EC2 Container Service | DeleteCapacityProvider | Delete | Yes |
| Amazon EC2 Container Service | CreateService | Create | Yes |
| Amazon EC2 Container Service | PutAccountSetting | Edit | Yes |
| Amazon EC2 Container Service | RegisterContainerInstance | Register | Yes |
| Amazon EC2 Container Service | TagResource | Create | Yes |
| Amazon EC2 Container Service | ListAccountSettings | View | Yes |
| Amazon EC2 Container Service | DeleteCluster | Delete | Yes |
| Amazon EC2 Container Service | PutAttributes | Edit | Yes |
| Amazon EC2 Container Service | ListAttributes | View | Yes |
| Amazon EC2 Container Service | DescribeServices | View | Yes |
| Amazon EC2 Container Service | DescribeClusters | View | Yes |
| Amazon EC2 Container Service | StartTask | Start | Yes |
| Amazon EC2 Container Service | DescribeTaskDefinition | View | Yes |
| Amazon EC2 Container Service | DescribeTasks | View | Yes |
| Amazon EC2 Container Service | DeregisterTaskDefinition | Deregister | Yes |
| Amazon EC2 Container Service | RegisterTaskDefinition | Register | Yes |
| Amazon EC2 Container Service | CreateTaskSet | Create | Yes |
| Amazon EC2 Container Service | UpdateClusterSettings | Edit | Yes |
| Amazon EC2 Container Service | UpdateTaskSet | Edit | Yes |
| Amazon EC2 Container Service | UpdateCapacityProvider | Edit | Yes |
| Amazon EC2 Container Service | ListTasks | View | Yes |
| Amazon EC2 Container Service | PutAccountSettingDefault | Edit | Yes |
| Amazon EC2 Container Service | UpdateService | Edit | Yes |
| Amazon EC2 Container Service | DescribeContainerInstances | View | Yes |
| Amazon EC2 Container Service | DeleteService | Delete | Yes |
| Amazon EC2 Container Service | DeregisterContainerInstance | Deregister | Yes |
| Amazon EC2 Container Service | PutClusterCapacityProviders | Edit | Yes |
| Amazon EC2 Container Service | ListTagsForResource | View | Yes |
| Amazon EC2 Container Service | DescribeTaskSets | View | Yes |
| Amazon EC2 Container Service | SubmitContainerStateChange | Create | Yes |
| Amazon EC2 Container Service | ListClusters | View | Yes |
| Amazon EC2 Container Service | StopTask | Stop | Yes |
| Amazon EC2 Container Service | DeleteAccountSetting | Delete | Yes |
| Amazon EC2 Container Service | DiscoverPollEndpoint | Create | Yes |
| Amazon EC2 Container Service | UntagResource | Delete | Yes |
| Amazon EC2 Container Service | UpdateCluster | Edit | Yes |
| Amazon EC2 Container Service | UpdateContainerInstancesState | Edit | Yes |
| Amazon EC2 Container Service | SubmitTaskStateChange | Create | Yes |
| Amazon EC2 Container Service | UpdateContainerAgent | Edit | Yes |
| Amazon EC2 Container Service | RunTask | Create | Yes |
| Amazon EC2 Container Service | ListTaskDefinitionFamilies | View | Yes |
| Amazon EC2 Container Service | CreateCluster | Create | Yes |
| Amazon EC2 Container Service | CreateCapacityProvider | Create | Yes |
| Amazon EC2 Container Service | ExecuteCommand | Create | Yes |
| Amazon EC2 Container Service | ListServices | View | Yes |
| Amazon EC2 Container Service | UpdateServicePrimaryTaskSet | Edit | Yes |
| Amazon EC2 Container Service | DeleteTaskSet | Delete | Yes |
| Amazon EC2 Container Service | DescribeCapacityProviders | View | Yes |
| Amazon EC2 Container Service | ListTaskDefinitions | View | Yes |
| Amazon EC2 Container Service | ListContainerInstances | View | Yes |
| Amazon EC2 Container Service | DeleteAttributes | Delete | Yes |
| Amazon EKS | DescribeCluster | View | Yes |
| Amazon EKS | DeleteCluster | Delete | Yes |
| Amazon EKS | DescribeIdentityProviderConfig | View | Yes |
| Amazon EKS | DisassociateIdentityProviderConfig | Delete | Yes |
| Amazon EKS | DescribeAddonVersions | View | Yes |
| Amazon EKS | UpdateClusterVersion | Edit | Yes |
| Amazon EKS | ListUpdates | View | Yes |
| Amazon EKS | AssociateEncryptionConfig | Create | Yes |
| Amazon EKS | CreateAddon | Create | Yes |
| Amazon EKS | ListAddons | View | Yes |
| Amazon EKS | DescribeAddon | View | Yes |
| Amazon EKS | DeleteAddon | Delete | Yes |
| Amazon EKS | UpdateClusterConfig | Edit | Yes |
| Amazon EKS | DescribeUpdate | View | Yes |
| Amazon EKS | CreateFargateProfile | Create | Yes |
| Amazon EKS | ListFargateProfiles | View | Yes |
| Amazon EKS | UpdateNodegroupVersion | Edit | Yes |
| Amazon EKS | DescribeFargateProfile | View | Yes |
| Amazon EKS | DeleteFargateProfile | Delete | Yes |
| Amazon EKS | DescribeNodegroup | View | Yes |
| Amazon EKS | DeleteNodegroup | Delete | Yes |
| Amazon EKS | AssociateIdentityProviderConfig | Create | Yes |
| Amazon EKS | UpdateNodegroupConfig | Edit | Yes |
| Amazon EKS | UntagResource | Delete | Yes |
| Amazon EKS | TagResource | Create | Yes |
| Amazon EKS | ListTagsForResource | View | Yes |
| Amazon EKS | ListIdentityProviderConfigs | View | Yes |
| Amazon EKS | UpdateAddon | Edit | Yes |
| Amazon EKS | CreateNodegroup | Create | Yes |
| Amazon EKS | ListNodegroups | View | Yes |
| Amazon EKS | CreateCluster | Create | Yes |
| Amazon EKS | ListClusters | View | Yes |
| Amazon Elastic Beanstalk | DescribeEnvironments | View | API Only |
| Amazon Elastic Beanstalk | CreatePlatformVersion | Create | API Only |
| Amazon Elastic Beanstalk | RetrieveEnvironmentInfo | View | API Only |
| Amazon Elastic Beanstalk | DescribeConfigurationSettings | View | API Only |
| Amazon Elastic Beanstalk | CreateEnvironment | Create | API Only |
| Amazon Elastic Beanstalk | ApplyEnvironmentManagedAction | Edit | API Only |
| Amazon Elastic Beanstalk | ListTagsForResource | View | API Only |
| Amazon Elastic Beanstalk | AbortEnvironmentUpdate | Create | API Only |
| Amazon Elastic Beanstalk | DescribeEnvironmentManagedActionHistory | View | API Only |
| Amazon Elastic Beanstalk | UpdateEnvironment | Edit | API Only |
| Amazon Elastic Beanstalk | UpdateApplication | Edit | API Only |
| Amazon Elastic Beanstalk | CreateStorageLocation | Create | API Only |
| Amazon Elastic Beanstalk | ListPlatformBranches | View | API Only |
| Amazon Elastic Beanstalk | DeleteApplicationVersion | Delete | API Only |
| Amazon Elastic Beanstalk | DescribeConfigurationOptions | View | API Only |
| Amazon Elastic Beanstalk | DescribeInstancesHealth | View | API Only |
| Amazon Elastic Beanstalk | DescribeEnvironmentManagedActions | View | API Only |
| Amazon Elastic Beanstalk | DeleteConfigurationTemplate | Delete | API Only |
| Amazon Elastic Beanstalk | ListAvailableSolutionStacks | View | API Only |
| Amazon Elastic Beanstalk | DescribeEnvironmentHealth | View | API Only |
| Amazon Elastic Beanstalk | UpdateApplicationResourceLifecycle | Edit | API Only |
| Amazon Elastic Beanstalk | UpdateApplicationVersion | Edit | API Only |
| Amazon Elastic Beanstalk | CreateApplication | Create | API Only |
| Amazon Elastic Beanstalk | ListPlatformVersions | View | API Only |
| Amazon Elastic Beanstalk | UpdateTagsForResource | Edit | API Only |
| Amazon Elastic Beanstalk | DeletePlatformVersion | Delete | API Only |
| Amazon Elastic Beanstalk | RestartAppServer | Reboot | API Only |
| Amazon Elastic Beanstalk | DescribeEvents | View | API Only |
| Amazon Elastic Beanstalk | SwapEnvironmentCNAMEs | Create | API Only |
| Amazon Elastic Beanstalk | AssociateEnvironmentOperationsRole | Create | API Only |
| Amazon Elastic Beanstalk | DescribeAccountAttributes | View | API Only |
| Amazon Elastic Beanstalk | CreateApplicationVersion | Create | API Only |
| Amazon Elastic Beanstalk | DeleteApplication | Delete | API Only |
| Amazon Elastic Beanstalk | UpdateConfigurationTemplate | Edit | API Only |
| Amazon Elastic Beanstalk | ValidateConfigurationSettings | Create | API Only |
| Amazon Elastic Beanstalk | RequestEnvironmentInfo | Create | API Only |
| Amazon Elastic Beanstalk | DescribeApplicationVersions | View | API Only |
| Amazon Elastic Beanstalk | DescribeEnvironmentResources | View | API Only |
| Amazon Elastic Beanstalk | DescribeApplications | View | API Only |
| Amazon Elastic Beanstalk | TerminateEnvironment | Terminate | API Only |
| Amazon Elastic Beanstalk | DescribePlatformVersion | View | API Only |
| Amazon Elastic Beanstalk | CreateConfigurationTemplate | Create | API Only |
| Amazon Elastic Beanstalk | DisassociateEnvironmentOperationsRole | Delete | API Only |
| Amazon Elastic Beanstalk | CheckDNSAvailability | Create | API Only |
| Amazon Elastic Beanstalk | ComposeEnvironments | Create | API Only |
| Amazon Elastic Beanstalk | RebuildEnvironment | Create | API Only |
| Amazon Elastic Beanstalk | DeleteEnvironmentConfiguration | Delete | API Only |
| Amazon Elastic Container Registry | Create | CompleteLayerUpload | Yes |
| Amazon Elastic Container Registry | View | GetRepositoryCatalogData | Yes |
| Amazon Elastic Container Registry | View | GetAuthorizationToken | Yes |
| Amazon Elastic Container Registry | View | DescribeImageTags | Yes |
| Amazon Elastic Container Registry | Create | CheckLayerAvailability | Yes |
| Amazon Elastic Container Registry | Create | SetRepositoryPolicy | Yes |
| Amazon Elastic Container Registry | View | DescribeImages | Yes |
| Amazon Elastic Container Registry | Delete | DeleteRepositoryPolicy | Yes |
| Amazon Elastic Container Registry | View | GetRegistryCatalogData | Yes |
| Amazon Elastic Container Registry | Edit | PutRegistryCatalogData | Yes |
| Amazon Elastic Container Registry | Edit | PutRepositoryCatalogData | Yes |
| Amazon Elastic Container Registry | Upload | UploadLayerPart | Yes |
| Amazon Elastic Container Registry | View | DescribeRepositories | Yes |
| Amazon Elastic Container Registry | Delete | DeleteImage | Yes |
| Amazon Elastic Container Registry | Create | InitiateLayerUpload | Yes |
| Amazon Elastic Container Registry | Delete | DeleteRepository | Yes |
| Amazon Elastic Container Registry | Create | CreateRepository | Yes |
| Amazon Elastic Container Registry | Edit | PutImage | Yes |
| Amazon Elastic Container Registry | View | DescribeRegistries | Yes |
| Amazon Elastic Container Registry | View | GetRepositoryPolicy | Yes |
| Amazon Elastic Container Registry | CreateTags | Create | Yes |
| Amazon Elastic File System | CreateAccessPoint | Create | API Only |
| Amazon Elastic File System | DescribeAccessPoints | View | API Only |
| Amazon Elastic File System | CreateFileSystem | Create | API Only |
| Amazon Elastic File System | DescribeFileSystems | View | API Only |
| Amazon Elastic File System | CreateMountTarget | Create | API Only |
| Amazon Elastic File System | DescribeMountTargets | View | API Only |
| Amazon Elastic File System | DeleteMountTarget | Delete | API Only |
| Amazon Elastic File System | UpdateFileSystem | Edit | API Only |
| Amazon Elastic File System | DeleteFileSystem | Delete | API Only |
| Amazon Elastic File System | DeleteAccessPoint | Delete | API Only |
| Amazon Elastic File System | ModifyMountTargetSecurityGroups | Edit | API Only |
| Amazon Elastic File System | DescribeMountTargetSecurityGroups | View | API Only |
| Amazon Elastic File System | DeleteTags | Delete | API Only |
| Amazon Elastic File System | PutLifecycleConfiguration | Edit | API Only |
| Amazon Elastic File System | DescribeLifecycleConfiguration | View | API Only |
| Amazon Elastic File System | DescribeTags | View | API Only |
| Amazon Elastic File System | PutBackupPolicy | Edit | API Only |
| Amazon Elastic File System | DescribeBackupPolicy | View | API Only |
| Amazon Elastic File System | UntagResource | Delete | API Only |
| Amazon Elastic File System | PutFileSystemPolicy | Edit | API Only |
| Amazon Elastic File System | DescribeFileSystemPolicy | View | API Only |
| Amazon Elastic File System | DeleteFileSystemPolicy | Delete | API Only |
| Amazon Elastic File System | TagResource | Create | API Only |
| Amazon Elastic File System | ListTagsForResource | View | API Only |
| Amazon Elastic Load Balancing | DeleteListener | Delete | Yes |
| Amazon Elastic Load Balancing | CreateTargetGroup | Create | Yes |
| Amazon Elastic Load Balancing | ModifyLoadBalancerAttributes | Edit | Yes |
| Amazon Elastic Load Balancing | DescribeListenerCertificates | View | Yes |
| Amazon Elastic Load Balancing | DescribeRules | View | Yes |
| Amazon Elastic Load Balancing | ModifyTargetGroup | Edit | Yes |
| Amazon Elastic Load Balancing | SetSubnets | Create | Yes |
| Amazon Elastic Load Balancing | DescribeTargetHealth | View | Yes |
| Amazon Elastic Load Balancing | DescribeTags | View | Yes |
| Amazon Elastic Load Balancing | DeleteTargetGroup | Delete | Yes |
| Amazon Elastic Load Balancing | DescribeAccountLimits | View | Yes |
| Amazon Elastic Load Balancing | ModifyTargetGroupAttributes | Edit | Yes |
| Amazon Elastic Load Balancing | ModifyRule | Edit | Yes |
| Amazon Elastic Load Balancing | RemoveTags | Delete | Yes |
| Amazon Elastic Load Balancing | SetRulePriorities | Create | Yes |
| Amazon Elastic Load Balancing | DeleteRule | Delete | Yes |
| Amazon Elastic Load Balancing | CreateListener | Create | Yes |
| Amazon Elastic Load Balancing | ModifyListener | Edit | Yes |
| Amazon Elastic Load Balancing | DescribeSSLPolicies | View | Yes |
| Amazon Elastic Load Balancing | DeregisterTargets | Deregister | Yes |
| Amazon Elastic Load Balancing | DescribeTargetGroupAttributes | View | Yes |
| Amazon Elastic Load Balancing | CreateLoadBalancer | Create | Yes |
| Amazon Elastic Load Balancing | CreateRule | Create | Yes |
| Amazon Elastic Load Balancing | SetIpAddressType | Create | Yes |
| Amazon Elastic Load Balancing | DescribeListeners | View | Yes |
| Amazon Elastic Load Balancing | DescribeLoadBalancers | View | Yes |
| Amazon Elastic Load Balancing | SetSecurityGroups | Create | Yes |
| Amazon Elastic Load Balancing | DescribeLoadBalancerAttributes | View | Yes |
| Amazon Elastic Load Balancing | AddTags | Create | Yes |
| Amazon Elastic Load Balancing | AddListenerCertificates | Create | Yes |
| Amazon Elastic Load Balancing | DescribeTargetGroups | View | Yes |
| Amazon Elastic Load Balancing | RegisterTargets | Register | Yes |
| Amazon Elastic Load Balancing | RemoveListenerCertificates | Delete | Yes |
| Amazon Elastic Load Balancing | DeleteLoadBalancer | Delete | Yes |
| Amazon ElastiCache | DeleteReplicationGroup | Delete | Yes |
| Amazon ElastiCache | DecreaseReplicaCount | Edit | Yes |
| Amazon ElastiCache | DescribeGlobalReplicationGroups | View | Yes |
| Amazon ElastiCache | CreateUserGroup | Create | Yes |
| Amazon ElastiCache | CreateCacheSubnetGroup | Create | Yes |
| Amazon ElastiCache | IncreaseReplicaCount | Edit | Yes |
| Amazon ElastiCache | DeleteCacheCluster | Delete | Yes |
| Amazon ElastiCache | DeleteGlobalReplicationGroup | Delete | Yes |
| Amazon ElastiCache | ListTagsForResource | View | Yes |
| Amazon ElastiCache | DescribeReservedCacheNodesOfferings | View | Yes |
| Amazon ElastiCache | RebalanceSlotsInGlobalReplicationGroup | Create | Yes |
| Amazon ElastiCache | DescribeUserGroups | View | Yes |
| Amazon ElastiCache | DescribeSnapshots | View | Yes |
| Amazon ElastiCache | ListAllowedNodeTypeModifications | View | Yes |
| Amazon ElastiCache | DescribeEngineDefaultParameters | View | Yes |
| Amazon ElastiCache | CreateCacheCluster | Create | Yes |
| Amazon ElastiCache | ResetCacheParameterGroup | Edit | Yes |
| Amazon ElastiCache | DescribeCacheParameterGroups | View | Yes |
| Amazon ElastiCache | CreateSnapshot | Create | Yes |
| Amazon ElastiCache | ModifyCacheParameterGroup | Edit | Yes |
| Amazon ElastiCache | CreateReplicationGroup | Create | Yes |
| Amazon ElastiCache | DeleteSnapshot | Delete | Yes |
| Amazon ElastiCache | CreateUser | Create | Yes |
| Amazon ElastiCache | FailoverGlobalReplicationGroup | Create | Yes |
| Amazon ElastiCache | CopySnapshot | Copy | Yes |
| Amazon ElastiCache | ModifyCacheCluster | Edit | Yes |
| Amazon ElastiCache | ModifyUser | Edit | Yes |
| Amazon ElastiCache | DeleteCacheSecurityGroup | Delete | Yes |
| Amazon ElastiCache | DescribeCacheEngineVersions | View | Yes |
| Amazon ElastiCache | DecreaseNodeGroupsInGlobalReplicationGroup | Edit | Yes |
| Amazon ElastiCache | RevokeCacheSecurityGroupIngress | Delete | Yes |
| Amazon ElastiCache | CreateGlobalReplicationGroup | Create | Yes |
| Amazon ElastiCache | StartMigration | Start | Yes |
| Amazon ElastiCache | ModifyReplicationGroup | Edit | Yes |
| Amazon ElastiCache | DescribeUsers | View | Yes |
| Amazon ElastiCache | StopUpdateAction | Stop | Yes |
| Amazon ElastiCache | DescribeUpdateActions | View | Yes |
| Amazon ElastiCache | DisassociateGlobalReplicationGroup | Delete | Yes |
| Amazon ElastiCache | DeleteUserGroup | Delete | Yes |
| Amazon ElastiCache | DescribeCacheParameters | View | Yes |
| Amazon ElastiCache | RebootCacheCluster | Reboot | Yes |
| Amazon ElastiCache | AuthorizeCacheSecurityGroupIngress | Create | Yes |
| Amazon ElastiCache | PurchaseReservedCacheNodesOffering | Purchase | Yes |
| Amazon ElastiCache | DeleteCacheParameterGroup | Delete | Yes |
| Amazon ElastiCache | ModifyUserGroup | Edit | Yes |
| Amazon ElastiCache | DescribeCacheSubnetGroups | View | Yes |
| Amazon ElastiCache | ModifyReplicationGroupShardConfiguration | Edit | Yes |
| Amazon ElastiCache | DeleteCacheSubnetGroup | Delete | Yes |
| Amazon ElastiCache | IncreaseNodeGroupsInGlobalReplicationGroup | Edit | Yes |
| Amazon ElastiCache | DescribeServiceUpdates | View | Yes |
| Amazon ElastiCache | CreateCacheParameterGroup | Create | Yes |
| Amazon ElastiCache | ModifyCacheSubnetGroup | Edit | Yes |
| Amazon ElastiCache | RemoveTagsFromResource | Delete | Yes |
| Amazon ElastiCache | AddTagsToResource | Create | Yes |
| Amazon ElastiCache | TestFailover | Create | Yes |
| Amazon ElastiCache | DescribeEvents | View | Yes |
| Amazon ElastiCache | DescribeCacheClusters | View | Yes |
| Amazon ElastiCache | DeleteUser | Delete | Yes |
| Amazon ElastiCache | DescribeCacheSecurityGroups | View | Yes |
| Amazon ElastiCache | DescribeReservedCacheNodes | View | Yes |
| Amazon ElastiCache | CompleteMigration | Create | Yes |
| Amazon ElastiCache | ApplyUpdateAction | Edit | Yes |
| Amazon ElastiCache | ModifyGlobalReplicationGroup | Edit | Yes |
| Amazon ElastiCache | CreateCacheSecurityGroup | Create | Yes |
| Amazon ElastiCache | DescribeReplicationGroups | View | Yes |
| Amazon Elasticsearch Service | CreateElasticsearchDomain | Create | Yes |
| Amazon Elasticsearch Service | AssociatePackage | Create | Yes |
| Amazon Elasticsearch Service | AcceptInboundCrossClusterSearchConnection | Approve | Yes |
| Amazon Elasticsearch Service | StartElasticsearchServiceSoftwareUpdate | Start | Yes |
| Amazon Elasticsearch Service | UpgradeElasticsearchDomain | Create | Yes |
| Amazon Elasticsearch Service | CreatePackage | Create | Yes |
| Amazon Elasticsearch Service | DescribeReservedElasticsearchInstanceOfferings | View | Yes |
| Amazon Elasticsearch Service | DeleteInboundCrossClusterSearchConnection | Delete | Yes |
| Amazon Elasticsearch Service | ListPackagesForDomain | View | Yes |
| Amazon Elasticsearch Service | DescribeElasticsearchDomain | View | Yes |
| Amazon Elasticsearch Service | DeleteElasticsearchDomain | Delete | Yes |
| Amazon Elasticsearch Service | CreateOutboundCrossClusterSearchConnection | Create | Yes |
| Amazon Elasticsearch Service | DescribePackages | View | Yes |
| Amazon Elasticsearch Service | AddTags | Create | Yes |
| Amazon Elasticsearch Service | UpdatePackage | Edit | Yes |
| Amazon Elasticsearch Service | DescribeInboundCrossClusterSearchConnections | View | Yes |
| Amazon Elasticsearch Service | DeleteOutboundCrossClusterSearchConnection | Delete | Yes |
| Amazon Elasticsearch Service | GetUpgradeHistory | View | Yes |
| Amazon Elasticsearch Service | DescribeDomainAutoTunes | View | Yes |
| Amazon Elasticsearch Service | ListElasticsearchVersions | View | Yes |
| Amazon Elasticsearch Service | ListElasticsearchInstanceTypes | View | Yes |
| Amazon Elasticsearch Service | DissociatePackage | Create | Yes |
| Amazon Elasticsearch Service | ListDomainNames | View | Yes |
| Amazon Elasticsearch Service | GetCompatibleElasticsearchVersions | View | Yes |
| Amazon Elasticsearch Service | DeleteElasticsearchServiceRole | Delete | Yes |
| Amazon Elasticsearch Service | DescribeReservedElasticsearchInstances | View | Yes |
| Amazon Elasticsearch Service | UpdateElasticsearchDomainConfig | Edit | Yes |
| Amazon Elasticsearch Service | DescribeElasticsearchDomainConfig | View | Yes |
| Amazon Elasticsearch Service | DescribeElasticsearchInstanceTypeLimits | View | Yes |
| Amazon Elasticsearch Service | GetPackageVersionHistory | View | Yes |
| Amazon Elasticsearch Service | CancelElasticsearchServiceSoftwareUpdate | Delete | Yes |
| Amazon Elasticsearch Service | ListTags | View | Yes |
| Amazon Elasticsearch Service | PurchaseReservedElasticsearchInstanceOffering | Purchase | Yes |
| Amazon Elasticsearch Service | DescribeOutboundCrossClusterSearchConnections | View | Yes |
| Amazon Elasticsearch Service | RejectInboundCrossClusterSearchConnection | Reject | Yes |
| Amazon Elasticsearch Service | DeletePackage | Delete | Yes |
| Amazon Elasticsearch Service | DescribeElasticsearchDomains | View | Yes |
| Amazon Elasticsearch Service | ListDomainsForPackage | View | Yes |
| Amazon Elasticsearch Service | RemoveTags | Delete | Yes |
| Amazon Elasticsearch Service | GetUpgradeStatus | View | Yes |
| Amazon Glacier | InitiateVaultLock | Create | Yes |
| Amazon Glacier | GetVaultLock | View | Yes |
| Amazon Glacier | AbortVaultLock | Delete | Yes |
| Amazon Glacier | SetDataRetrievalPolicy | Create | Yes |
| Amazon Glacier | GetDataRetrievalPolicy | View | Yes |
| Amazon Glacier | ListVaults | View | Yes |
| Amazon Glacier | InitiateMultipartUpload | Create | Yes |
| Amazon Glacier | ListMultipartUploads | View | Yes |
| Amazon Glacier | CompleteVaultLock | Create | Yes |
| Amazon Glacier | RemoveTagsFromVault | Delete | Yes |
| Amazon Glacier | UploadMultipartPart | Upload | Yes |
| Amazon Glacier | CompleteMultipartUpload | Create | Yes |
| Amazon Glacier | ListParts | View | Yes |
| Amazon Glacier | AbortMultipartUpload | Delete | Yes |
| Amazon Glacier | UploadArchive | Upload | Yes |
| Amazon Glacier | CreateVault | Create | Yes |
| Amazon Glacier | DescribeVault | View | Yes |
| Amazon Glacier | DeleteVault | Delete | Yes |
| Amazon Glacier | ListTagsForVault | View | Yes |
| Amazon Glacier | AddTagsToVault | Create | Yes |
| Amazon Glacier | SetVaultAccessPolicy | Create | Yes |
| Amazon Glacier | GetVaultAccessPolicy | View | Yes |
| Amazon Glacier | DeleteVaultAccessPolicy | Delete | Yes |
| Amazon Glacier | PurchaseProvisionedCapacity | Purchase | Yes |
| Amazon Glacier | ListProvisionedCapacity | View | Yes |
| Amazon Glacier | DescribeJob | View | Yes |
| Amazon Glacier | GetJobOutput | View | Yes |
| Amazon Glacier | DeleteArchive | Delete | Yes |
| Amazon Glacier | SetVaultNotifications | Create | Yes |
| Amazon Glacier | GetVaultNotifications | View | Yes |
| Amazon Glacier | DeleteVaultNotifications | Delete | Yes |
| Amazon Glacier | InitiateJob | Create | Yes |
| Amazon Glacier | ListJobs | View | Yes |
| Amazon GuardDuty | ListOrganizationAdminAccounts | View | Yes |
| Amazon GuardDuty | DisableOrganizationAdminAccount | Delete | Yes |
| Amazon GuardDuty | CreateDetector | Create | Yes |
| Amazon GuardDuty | ListDetectors | View | Yes |
| Amazon GuardDuty | GetMembers | View | Yes |
| Amazon GuardDuty | DeleteInvitations | Delete | Yes |
| Amazon GuardDuty | CreatePublishingDestination | Create | Yes |
| Amazon GuardDuty | ListPublishingDestinations | View | Yes |
| Amazon GuardDuty | UnarchiveFindings | Create | Yes |
| Amazon GuardDuty | GetFindingsStatistics | View | Yes |
| Amazon GuardDuty | GetUsageStatistics | View | Yes |
| Amazon GuardDuty | DisassociateMembers | Delete | Yes |
| Amazon GuardDuty | UpdateThreatIntelSet | Edit | Yes |
| Amazon GuardDuty | GetThreatIntelSet | View | Yes |
| Amazon GuardDuty | DeleteThreatIntelSet | Delete | Yes |
| Amazon GuardDuty | CreateSampleFindings | Create | Yes |
| Amazon GuardDuty | DeclineInvitations | Create | Yes |
| Amazon GuardDuty | CreateThreatIntelSet | Create | Yes |
| Amazon GuardDuty | ListThreatIntelSets | View | Yes |
| Amazon GuardDuty | GetFindings | View | Yes |
| Amazon GuardDuty | ArchiveFindings | Create | Yes |
| Amazon GuardDuty | DisassociateFromMasterAccount | Delete | Yes |
| Amazon GuardDuty | UntagResource | Delete | Yes |
| Amazon GuardDuty | UpdatePublishingDestination | Edit | Yes |
| Amazon GuardDuty | DescribePublishingDestination | View | Yes |
| Amazon GuardDuty | DeletePublishingDestination | Delete | Yes |
| Amazon GuardDuty | UpdateMemberDetectors | Edit | Yes |
| Amazon GuardDuty | EnableOrganizationAdminAccount | Enable | Yes |
| Amazon GuardDuty | UpdateFindingsFeedback | Edit | Yes |
| Amazon GuardDuty | StopMonitoringMembers | Stop | Yes |
| Amazon GuardDuty | UpdateFilter | Edit | Yes |
| Amazon GuardDuty | GetFilter | View | Yes |
| Amazon GuardDuty | DeleteFilter | Delete | Yes |
| Amazon GuardDuty | ListFindings | View | Yes |
| Amazon GuardDuty | CreateFilter | Create | Yes |
| Amazon GuardDuty | ListFilters | View | Yes |
| Amazon GuardDuty | UpdateOrganizationConfiguration | Edit | Yes |
| Amazon GuardDuty | DescribeOrganizationConfiguration | View | Yes |
| Amazon GuardDuty | ListInvitations | View | Yes |
| Amazon GuardDuty | AcceptInvitation | Approve | Yes |
| Amazon GuardDuty | GetMasterAccount | View | Yes |
| Amazon GuardDuty | DeleteMembers | Delete | Yes |
| Amazon GuardDuty | GetInvitationsCount | View | Yes |
| Amazon GuardDuty | TagResource | Create | Yes |
| Amazon GuardDuty | ListTagsForResource | View | Yes |
| Amazon GuardDuty | CreateMembers | Create | Yes |
| Amazon GuardDuty | ListMembers | View | Yes |
| Amazon GuardDuty | UpdateDetector | Edit | Yes |
| Amazon GuardDuty | GetDetector | View | Yes |
| Amazon GuardDuty | DeleteDetector | Delete | Yes |
| Amazon GuardDuty | CreateIPSet | Create | Yes |
| Amazon GuardDuty | ListIPSets | View | Yes |
| Amazon GuardDuty | InviteMembers | Create | Yes |
| Amazon GuardDuty | StartMonitoringMembers | Start | Yes |
| Amazon GuardDuty | GetMemberDetectors | View | Yes |
| Amazon GuardDuty | UpdateIPSet | Edit | Yes |
| Amazon GuardDuty | GetIPSet | View | Yes |
| Amazon GuardDuty | DeleteIPSet | Delete | Yes |
| Amazon IAM | ListEntitiesForPolicy | View | Yes |
| Amazon IAM | GetPolicyVersion | View | Yes |
| Amazon IAM | ChangePassword | Create | Yes |
| Amazon IAM | ListRolePolicies | View | Yes |
| Amazon IAM | ListGroups | View | Yes |
| Amazon IAM | GetServiceLastAccessedDetails | View | Yes |
| Amazon IAM | GetOpenIDConnectProvider | View | Yes |
| Amazon IAM | GetCredentialReport | View | Yes |
| Amazon IAM | ListAttachedGroupPolicies | View | Yes |
| Amazon IAM | ListInstanceProfilesForRole | View | Yes |
| Amazon IAM | DeactivateMFADevice | Deactivate | Yes |
| Amazon IAM | TagPolicy | Create | Yes |
| Amazon IAM | SetSecurityTokenServicePreferences | Create | Yes |
| Amazon IAM | ListRoleTags | View | Yes |
| Amazon IAM | UpdateServerCertificate | Edit | Yes |
| Amazon IAM | DetachGroupPolicy | Delete | Yes |
| Amazon IAM | UntagMFADevice | Delete | Yes |
| Amazon IAM | ListMFADevices | View | Yes |
| Amazon IAM | DeleteServiceLinkedRole | Delete | Yes |
| Amazon IAM | ListSSHPublicKeys | View | Yes |
| Amazon IAM | ListUserTags | View | Yes |
| Amazon IAM | ListOpenIDConnectProviders | View | Yes |
| Amazon IAM | GetInstanceProfile | View | Yes |
| Amazon IAM | ListInstanceProfiles | View | Yes |
| Amazon IAM | DeletePolicy | Delete | Yes |
| Amazon IAM | ListUserPolicies | View | Yes |
| Amazon IAM | ListGroupsForUser | View | Yes |
| Amazon IAM | DeleteGroupPolicy | Delete | Yes |
| Amazon IAM | PutRolePermissionsBoundary | Edit | Yes |
| Amazon IAM | UpdateServiceSpecificCredential | Edit | Yes |
| Amazon IAM | RemoveUserFromGroup | Delete | Yes |
| Amazon IAM | DeleteGroup | Delete | Yes |
| Amazon IAM | GetAccountPasswordPolicy | View | Yes |
| Amazon IAM | CreatePolicyVersion | Create | Yes |
| Amazon IAM | PutUserPolicy | Edit | Yes |
| Amazon IAM | GetAccountSummary | View | Yes |
| Amazon IAM | SimulateCustomPolicy | Create | Yes |
| Amazon IAM | ListSAMLProviderTags | View | Yes |
| Amazon IAM | TagMFADevice | Create | Yes |
| Amazon IAM | AddUserToGroup | Create | Yes |
| Amazon IAM | GetSSHPublicKey | View | Yes |
| Amazon IAM | DeleteSigningCertificate | Delete | Yes |
| Amazon IAM | ListServiceSpecificCredentials | View | Yes |
| Amazon IAM | DeleteVirtualMFADevice | Delete | Yes |
| Amazon IAM | PutRolePolicy | Edit | Yes |
| Amazon IAM | ListAttachedRolePolicies | View | Yes |
| Amazon IAM | GetAccountAuthorizationDetails | View | Yes |
| Amazon IAM | DeleteLoginProfile | Delete | Yes |
| Amazon IAM | DetachUserPolicy | Delete | Yes |
| Amazon IAM | SimulatePrincipalPolicy | Create | Yes |
| Amazon IAM | RemoveClientIDFromOpenIDConnectProvider | Delete | Yes |
| Amazon IAM | UntagUser | Delete | Yes |
| Amazon IAM | UpdateRoleDescription | Edit | Yes |
| Amazon IAM | AttachGroupPolicy | Attach | Yes |
| Amazon IAM | GetServiceLinkedRoleDeletionStatus | View | Yes |
| Amazon IAM | ListPolicyVersions | View | Yes |
| Amazon IAM | AddRoleToInstanceProfile | Create | Yes |
| Amazon IAM | GetUserPolicy | View | Yes |
| Amazon IAM | GenerateServiceLastAccessedDetails | Create | Yes |
| Amazon IAM | GetRolePolicy | View | Yes |
| Amazon IAM | PutGroupPolicy | Edit | Yes |
| Amazon IAM | UpdateAccountPasswordPolicy | Edit | Yes |
| Amazon IAM | GetLoginProfile | View | Yes |
| Amazon IAM | ListInstanceProfileTags | View | Yes |
| Amazon IAM | DeleteServerCertificate | Delete | Yes |
| Amazon IAM | GenerateCredentialReport | Create | Yes |
| Amazon IAM | ListRoles | View | Yes |
| Amazon IAM | SetDefaultPolicyVersion | Create | Yes |
| Amazon IAM | CreateVirtualMFADevice | Create | Yes |
| Amazon IAM | ListPolicies | View | Yes |
| Amazon IAM | TagInstanceProfile | Create | Yes |
| Amazon IAM | DeleteUserPolicy | Delete | Yes |
| Amazon IAM | GetSAMLProvider | View | Yes |
| Amazon IAM | CreatePolicy | Create | Yes |
| Amazon IAM | UntagInstanceProfile | Delete | Yes |
| Amazon IAM | PutUserPermissionsBoundary | Edit | Yes |
| Amazon IAM | TagOpenIDConnectProvider | Create | Yes |
| Amazon IAM | DeleteUser | Delete | Yes |
| Amazon IAM | ListPoliciesGrantingServiceAccess | View | Yes |
| Amazon IAM | ResyncMFADevice | Create | Yes |
| Amazon IAM | TagRole | Create | Yes |
| Amazon IAM | CreateLoginProfile | Create | Yes |
| Amazon IAM | ListAttachedUserPolicies | View | Yes |
| Amazon IAM | UploadServerCertificate | Upload | Yes |
| Amazon IAM | UpdateRole | Edit | Yes |
| Amazon IAM | UntagRole | Delete | Yes |
| Amazon IAM | ListGroupPolicies | View | Yes |
| Amazon IAM | UpdateSSHPublicKey | Edit | Yes |
| Amazon IAM | UpdateSigningCertificate | Edit | Yes |
| Amazon IAM | GetContextKeysForPrincipalPolicy | View | Yes |
| Amazon IAM | TagServerCertificate | Create | Yes |
| Amazon IAM | CreateInstanceProfile | Create | Yes |
| Amazon IAM | DeleteInstanceProfile | Delete | Yes |
| Amazon IAM | AttachUserPolicy | Attach | Yes |
| Amazon IAM | CreateUser | Create | Yes |
| Amazon IAM | ListServerCertificateTags | View | Yes |
| Amazon IAM | CreateRole | Create | Yes |
| Amazon IAM | GetRole | View | Yes |
| Amazon IAM | ListAccountAliases | View | Yes |
| Amazon IAM | UntagSAMLProvider | Delete | Yes |
| Amazon IAM | UpdateUser | Edit | Yes |
| Amazon IAM | GetUser | View | Yes |
| Amazon IAM | UpdateGroup | Edit | Yes |
| Amazon IAM | TagUser | Create | Yes |
| Amazon IAM | CreateOpenIDConnectProvider | Create | Yes |
| Amazon IAM | DeleteOpenIDConnectProvider | Delete | Yes |
| Amazon IAM | ListOpenIDConnectProviderTags | View | Yes |
| Amazon IAM | ListPolicyTags | View | Yes |
| Amazon IAM | DeleteSAMLProvider | Delete | Yes |
| Amazon IAM | GetGroupPolicy | View | Yes |
| Amazon IAM | CreateAccessKey | Create | Yes |
| Amazon IAM | AddClientIDToOpenIDConnectProvider | Create | Yes |
| Amazon IAM | UpdateSAMLProvider | Edit | Yes |
| Amazon IAM | UntagServerCertificate | Delete | Yes |
| Amazon IAM | UpdateLoginProfile | Edit | Yes |
| Amazon IAM | GetPolicy | View | Yes |
| Amazon IAM | DeleteAccountAlias | Delete | Yes |
| Amazon IAM | DeleteAccessKey | Delete | Yes |
| Amazon IAM | CreateServiceLinkedRole | Create | Yes |
| Amazon IAM | CreateGroup | Create | Yes |
| Amazon IAM | UpdateAssumeRolePolicy | Edit | Yes |
| Amazon IAM | ListUsers | View | Yes |
| Amazon IAM | DetachRolePolicy | Delete | Yes |
| Amazon IAM | EnableMFADevice | Enable | Yes |
| Amazon IAM | UntagPolicy | Delete | Yes |
| Amazon IAM | CreateServiceSpecificCredential | Create | Yes |
| Amazon IAM | GetServerCertificate | View | Yes |
| Amazon IAM | DeleteRole | Delete | Yes |
| Amazon IAM | DeleteRolePolicy | Delete | Yes |
| Amazon IAM | TagSAMLProvider | Create | Yes |
| Amazon IAM | ListSAMLProviders | View | Yes |
| Amazon IAM | ListVirtualMFADevices | View | Yes |
| Amazon IAM | ListAccessKeys | View | Yes |
| Amazon IAM | GetServiceLastAccessedDetailsWithEntities | View | Yes |
| Amazon IAM | GetGroup | View | Yes |
| Amazon IAM | UpdateAccessKey | Edit | Yes |
| Amazon IAM | DeleteServiceSpecificCredential | Delete | Yes |
| Amazon IAM | CreateSAMLProvider | Create | Yes |
| Amazon IAM | DeleteRolePermissionsBoundary | Delete | Yes |
| Amazon IAM | AttachRolePolicy | Attach | Yes |
| Amazon IAM | GetContextKeysForCustomPolicy | View | Yes |
| Amazon IAM | UntagOpenIDConnectProvider | Delete | Yes |
| Amazon IAM | RemoveRoleFromInstanceProfile | Delete | Yes |
| Amazon IAM | GetAccessKeyLastUsed | View | Yes |
| Amazon IAM | GenerateOrganizationsAccessReport | Create | Yes |
| Amazon IAM | ListSigningCertificates | View | Yes |
| Amazon IAM | UploadSSHPublicKey | Upload | Yes |
| Amazon IAM | UploadSigningCertificate | Upload | Yes |
| Amazon IAM | DeleteUserPermissionsBoundary | Delete | Yes |
| Amazon IAM | DeleteAccountPasswordPolicy | Delete | Yes |
| Amazon IAM | ResetServiceSpecificCredential | Edit | Yes |
| Amazon IAM | ListMFADeviceTags | View | Yes |
| Amazon IAM | CreateAccountAlias | Create | Yes |
| Amazon IAM | DeletePolicyVersion | Delete | Yes |
| Amazon IAM | UpdateOpenIDConnectProviderThumbprint | Edit | Yes |
| Amazon IAM | DeleteSSHPublicKey | Delete | Yes |
| Amazon IAM | ListServerCertificates | View | Yes |
| Amazon IAM | GetOrganizationsAccessReport | View | Yes |
| Amazon KMS | PutKeyPolicy | Edit | Yes |
| Amazon KMS | ListAliases | View | Yes |
| Amazon KMS | DisconnectCustomKeyStore | Create | Yes |
| Amazon KMS | GenerateDataKeyPairWithoutPlaintext | Create | Yes |
| Amazon KMS | EnableKeyRotation | Enable | Yes |
| Amazon KMS | DescribeCustomKeyStores | View | Yes |
| Amazon KMS | UpdateAlias | Edit | Yes |
| Amazon KMS | TagResource | Create | Yes |
| Amazon KMS | DeleteAlias | Delete | Yes |
| Amazon KMS | ImportKeyMaterial | Create | Yes |
| Amazon KMS | ScheduleKeyDeletion | Create | Yes |
| Amazon KMS | CreateCustomKeyStore | Create | Yes |
| Amazon KMS | GenerateRandom | Create | Yes |
| Amazon KMS | UpdateCustomKeyStore | Edit | Yes |
| Amazon KMS | CreateKey | Create | Yes |
| Amazon KMS | EnableKey | Enable | Yes |
| Amazon KMS | DisableKeyRotation | Delete | Yes |
| Amazon KMS | GetPublicKey | View | Yes |
| Amazon KMS | RevokeGrant | Delete | Yes |
| Amazon KMS | GetKeyPolicy | View | Yes |
| Amazon KMS | ListRetirableGrants | View | Yes |
| Amazon KMS | DescribeKey | View | Yes |
| Amazon KMS | GenerateDataKeyPair | Create | Yes |
| Amazon KMS | GetKeyRotationStatus | View | Yes |
| Amazon KMS | Encrypt | Create | Yes |
| Amazon KMS | CancelKeyDeletion | Delete | Yes |
| Amazon KMS | Sign | Create | Yes |
| Amazon KMS | ListGrants | View | Yes |
| Amazon KMS | GetParametersForImport | View | Yes |
| Amazon KMS | ConnectCustomKeyStore | Create | Yes |
| Amazon KMS | CreateAlias | Create | Yes |
| Amazon KMS | ListKeys | View | Yes |
| Amazon KMS | DeleteCustomKeyStore | Delete | Yes |
| Amazon KMS | ListKeyPolicies | View | Yes |
| Amazon KMS | DeleteImportedKeyMaterial | Delete | Yes |
| Amazon KMS | CreateGrant | Create | Yes |
| Amazon KMS | GenerateDataKey | Create | Yes |
| Amazon KMS | RetireGrant | Create | Yes |
| Amazon KMS | UntagResource | Delete | Yes |
| Amazon KMS | Verify | Create | Yes |
| Amazon KMS | UpdateKeyDescription | Edit | Yes |
| Amazon KMS | DisableKey | Delete | Yes |
| Amazon KMS | ReEncrypt | Create | Yes |
| Amazon KMS | ListResourceTags | View | Yes |
| Amazon KMS | GenerateDataKeyWithoutPlaintext | Create | Yes |
| Amazon KMS | Decrypt | Create | Yes |
| Amazon Lambda | AddLayerVersionPermission | Create | Yes |
| Amazon Lambda | GetLayerVersionPolicy | View | Yes |
| Amazon Lambda | CreateEventSourceMapping | Create | Yes |
| Amazon Lambda | ListEventSourceMappings | View | Yes |
| Amazon Lambda | GetFunction | View | Yes |
| Amazon Lambda | DeleteFunction | Delete | Yes |
| Amazon Lambda | CreateFunction | Create | Yes |
| Amazon Lambda | ListProvisionedConcurrencyConfigs | View | Yes |
| Amazon Lambda | UpdateFunctionConfiguration | Edit | Yes |
| Amazon Lambda | GetFunctionConfiguration | View | Yes |
| Amazon Lambda | PutFunctionEventInvokeConfig | Edit | Yes |
| Amazon Lambda | UpdateFunctionEventInvokeConfig | Edit | Yes |
| Amazon Lambda | GetFunctionEventInvokeConfig | View | Yes |
| Amazon Lambda | DeleteFunctionEventInvokeConfig | Delete | Yes |
| Amazon Lambda | PutProvisionedConcurrencyConfig | Edit | Yes |
| Amazon Lambda | GetProvisionedConcurrencyConfig | View | Yes |
| Amazon Lambda | DeleteProvisionedConcurrencyConfig | Delete | Yes |
| Amazon Lambda | UpdateEventSourceMapping | Edit | Yes |
| Amazon Lambda | GetEventSourceMapping | View | Yes |
| Amazon Lambda | DeleteEventSourceMapping | Delete | Yes |
| Amazon Lambda | UpdateFunctionCode | Edit | Yes |
| Amazon Lambda | CreateCodeSigningConfig | Create | Yes |
| Amazon Lambda | ListCodeSigningConfigs | View | Yes |
| Amazon Lambda | GetLayerVersion | View | Yes |
| Amazon Lambda | DeleteLayerVersion | Delete | Yes |
| Amazon Lambda | TagResource | Create | Yes |
| Amazon Lambda | ListTags | View | Yes |
| Amazon Lambda | PutFunctionConcurrency | Edit | Yes |
| Amazon Lambda | DeleteFunctionConcurrency | Delete | Yes |
| Amazon Lambda | PublishLayerVersion | Create | Yes |
| Amazon Lambda | ListLayerVersions | View | Yes |
| Amazon Lambda | ListFunctionsByCodeSigningConfig | View | Yes |
| Amazon Lambda | PublishVersion | Create | Yes |
| Amazon Lambda | ListVersionsByFunction | View | Yes |
| Amazon Lambda | ListFunctionEventInvokeConfigs | View | Yes |
| Amazon Lambda | UpdateCodeSigningConfig | Edit | Yes |
| Amazon Lambda | GetCodeSigningConfig | View | Yes |
| Amazon Lambda | DeleteCodeSigningConfig | Delete | Yes |
| Amazon Lambda | ListFunctions | View | Yes |
| Amazon Lambda | PutFunctionCodeSigningConfig | Edit | Yes |
| Amazon Lambda | GetFunctionCodeSigningConfig | View | Yes |
| Amazon Lambda | DeleteFunctionCodeSigningConfig | Delete | Yes |
| Amazon Lambda | RemoveLayerVersionPermission | Delete | Yes |
| Amazon Lambda | InvokeAsync | Create | Yes |
| Amazon Lambda | CreateAlias | Create | Yes |
| Amazon Lambda | ListAliases | View | Yes |
| Amazon Lambda | Invoke | Create | Yes |
| Amazon Lambda | GetLayerVersionByArn | View | Yes |
| Amazon Lambda | AddPermission | Create | Yes |
| Amazon Lambda | GetPolicy | View | Yes |
| Amazon Lambda | GetFunctionConcurrency | View | Yes |
| Amazon Lambda | ListLayers | View | Yes |
| Amazon Lambda | RemovePermission | Delete | Yes |
| Amazon Lambda | UntagResource | Delete | Yes |
| Amazon Lambda | GetAccountSettings | View | Yes |
| Amazon Lambda | UpdateAlias | Edit | Yes |
| Amazon Lambda | GetAlias | View | Yes |
| Amazon Lambda | DeleteAlias | Delete | Yes |
| Amazon MQ | UpdateConfiguration | Edit | Yes |
| Amazon MQ | DescribeConfiguration | View | Yes |
| Amazon MQ | UpdateUser | Edit | Yes |
| Amazon MQ | CreateUser | Create | Yes |
| Amazon MQ | DescribeUser | View | Yes |
| Amazon MQ | DeleteUser | Delete | Yes |
| Amazon MQ | CreateConfiguration | Create | Yes |
| Amazon MQ | ListConfigurations | View | Yes |
| Amazon MQ | UpdateBroker | Edit | Yes |
| Amazon MQ | DescribeBroker | View | Yes |
| Amazon MQ | DeleteBroker | Delete | Yes |
| Amazon MQ | CreateBroker | Create | Yes |
| Amazon MQ | ListBrokers | View | Yes |
| Amazon MQ | RebootBroker | Reboot | Yes |
| Amazon MQ | ListConfigurationRevisions | View | Yes |
| Amazon MQ | DescribeConfigurationRevision | View | Yes |
| Amazon MQ | DescribeBrokerInstanceOptions | View | Yes |
| Amazon MQ | DeleteTags | Delete | Yes |
| Amazon MQ | DescribeBrokerEngineTypes | View | Yes |
| Amazon MQ | ListUsers | View | Yes |
| Amazon MQ | CreateTags | Create | Yes |
| Amazon MQ | ListTags | View | Yes |
| Amazon Organizations | DescribePolicy | View | Yes |
| Amazon Organizations | InviteAccountToOrganization | Create | Yes |
| Amazon Organizations | DeclineHandshake | Create | Yes |
| Amazon Organizations | DisablePolicyType | Delete | Yes |
| Amazon Organizations | DeregisterDelegatedAdministrator | Deregister | Yes |
| Amazon Organizations | TagResource | Create | Yes |
| Amazon Organizations | EnableAWSServiceAccess | Enable | Yes |
| Amazon Organizations | DescribeHandshake | View | Yes |
| Amazon Organizations | CreateOrganizationalUnit | Create | Yes |
| Amazon Organizations | AttachPolicy | Attach | Yes |
| Amazon Organizations | CreatePolicy | Create | Yes |
| Amazon Organizations | DisableAWSServiceAccess | Delete | Yes |
| Amazon Organizations | DescribeEffectivePolicy | View | Yes |
| Amazon Organizations | RemoveAccountFromOrganization | Delete | Yes |
| Amazon Organizations | ListAccountsForParent | View | Yes |
| Amazon Organizations | ListCreateAccountStatus | View | Yes |
| Amazon Organizations | ListChildren | View | Yes |
| Amazon Organizations | DeletePolicy | Delete | Yes |
| Amazon Organizations | AcceptHandshake | Approve | Yes |
| Amazon Organizations | CreateGovCloudAccount | Create | Yes |
| Amazon Organizations | UpdatePolicy | Edit | Yes |
| Amazon Organizations | DeleteOrganizationalUnit | Delete | Yes |
| Amazon Organizations | ListAWSServiceAccessForOrganization | View | Yes |
| Amazon Organizations | ListHandshakesForOrganization | View | Yes |
| Amazon Organizations | ListOrganizationalUnitsForParent | View | Yes |
| Amazon Organizations | ListPoliciesForTarget | View | Yes |
| Amazon Organizations | ListParents | View | Yes |
| Amazon Organizations | DescribeAccount | View | Yes |
| Amazon Organizations | ListHandshakesForAccount | View | Yes |
| Amazon Organizations | DescribeCreateAccountStatus | View | Yes |
| Amazon Organizations | ListTargetsForPolicy | View | Yes |
| Amazon Organizations | DescribeOrganization | View | Yes |
| Amazon Organizations | RegisterDelegatedAdministrator | Register | Yes |
| Amazon Organizations | LeaveOrganization | Create | Yes |
| Amazon Organizations | ListAccounts | View | Yes |
| Amazon Organizations | CreateOrganization | Create | Yes |
| Amazon Organizations | ListRoots | View | Yes |
| Amazon Organizations | DeleteOrganization | Delete | Yes |
| Amazon Organizations | EnableAllFeatures | Enable | Yes |
| Amazon Organizations | DetachPolicy | Delete | Yes |
| Amazon Organizations | DescribeOrganizationalUnit | View | Yes |
| Amazon Organizations | ListDelegatedServicesForAccount | View | Yes |
| Amazon Organizations | UpdateOrganizationalUnit | Edit | Yes |
| Amazon Organizations | ListPolicies | View | Yes |
| Amazon Organizations | MoveAccount | Move | Yes |
| Amazon Organizations | ListTagsForResource | View | Yes |
| Amazon Organizations | CancelHandshake | Delete | Yes |
| Amazon Organizations | CreateAccount | Create | Yes |
| Amazon Organizations | EnablePolicyType | Enable | Yes |
| Amazon Organizations | ListDelegatedAdministrators | View | Yes |
| Amazon Organizations | UntagResource | Delete | Yes |
| Amazon RDS | RebootDBInstance | Reboot | Yes |
| Amazon RDS | DescribeEngineDefaultClusterParameters | View | Yes |
| Amazon RDS | DeleteDBClusterParameterGroup | Delete | Yes |
| Amazon RDS | ListTagsForResource | View | Yes |
| Amazon RDS | ModifyOptionGroup | Edit | Yes |
| Amazon RDS | CopyDBClusterSnapshot | Copy | Yes |
| Amazon RDS | DescribeDBInstanceAutomatedBackups | View | Yes |
| Amazon RDS | CreateDBClusterSnapshot | Create | Yes |
| Amazon RDS | Describe |