diff --git a/data/json/ReadOnlyAccess/v125/policy.json b/data/json/ReadOnlyAccess/v125/policy.json new file mode 100644 index 00000000..4ad6cde9 --- /dev/null +++ b/data/json/ReadOnlyAccess/v125/policy.json @@ -0,0 +1,2431 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "ReadOnlyActions", + "Effect": "Allow", + "Action": [ + "a4b:Get*", + "a4b:List*", + "a4b:Search*", + "access-analyzer:GetAccessPreview", + "access-analyzer:GetAnalyzedResource", + "access-analyzer:GetAnalyzer", + "access-analyzer:GetArchiveRule", + "access-analyzer:GetFinding", + "access-analyzer:GetGeneratedPolicy", + "access-analyzer:ListAccessPreviewFindings", + "access-analyzer:ListAccessPreviews", + "access-analyzer:ListAnalyzedResources", + "access-analyzer:ListAnalyzers", + "access-analyzer:ListArchiveRules", + "access-analyzer:ListFindings", + "access-analyzer:ListPolicyGenerations", + "access-analyzer:ListTagsForResource", + "access-analyzer:ValidatePolicy", + "account:GetAccountInformation", + "account:GetAlternateContact", + "account:GetChallengeQuestions", + "account:GetContactInformation", + "account:GetPrimaryEmail", + "account:GetRegionOptStatus", + "account:ListRegions", + "acm-pca:Describe*", + "acm-pca:Get*", + "acm-pca:List*", + "acm:Describe*", + "acm:Get*", + "acm:List*", + "aiops:GetInvestigation", + "aiops:GetInvestigationEvent", + "aiops:GetInvestigationGroup", + "aiops:GetInvestigationResource", + "aiops:ListInvestigationEvents", + "aiops:ListInvestigationGroups", + "aiops:ListInvestigations", + "airflow:ListEnvironments", + "airflow:ListTagsForResource", + "amplify:GetApp", + "amplify:GetBranch", + "amplify:GetDomainAssociation", + "amplify:GetJob", + "amplify:ListApps", + "amplify:ListBranches", + "amplify:ListDomainAssociations", + "amplify:ListJobs", + "aoss:BatchGetCollection", + "aoss:BatchGetLifecyclePolicy", + "aoss:BatchGetVpcEndpoint", + "aoss:GetAccessPolicy", + "aoss:GetAccountSettings", + "aoss:GetPoliciesStats", + "aoss:GetSecurityConfig", + "aoss:GetSecurityPolicy", + "aoss:ListAccessPolicies", + "aoss:ListCollections", + "aoss:ListLifecyclePolicies", + "aoss:ListSecurityConfigs", + "aoss:ListSecurityPolicies", + "aoss:ListTagsForResource", + "aoss:ListVpcEndpoints", + "apigateway:GET", + "appconfig:GetApplication", + "appconfig:GetConfiguration", + "appconfig:GetConfigurationProfile", + "appconfig:GetDeployment", + "appconfig:GetDeploymentStrategy", + "appconfig:GetEnvironment", + "appconfig:GetHostedConfigurationVersion", + "appconfig:ListApplications", + "appconfig:ListConfigurationProfiles", + "appconfig:ListDeployments", + "appconfig:ListDeploymentStrategies", + "appconfig:ListEnvironments", + "appconfig:ListHostedConfigurationVersions", + "appconfig:ListTagsForResource", + "appfabric:GetAppAuthorization", + "appfabric:GetAppBundle", + "appfabric:GetIngestion", + "appfabric:GetIngestionDestination", + "appfabric:ListAppAuthorizations", + "appfabric:ListAppBundles", + "appfabric:ListIngestionDestinations", + "appfabric:ListIngestions", + "appfabric:ListTagsForResource", + "appflow:DescribeConnector", + "appflow:DescribeConnectorEntity", + "appflow:DescribeConnectorFields", + "appflow:DescribeConnectorProfiles", + "appflow:DescribeConnectors", + "appflow:DescribeFlow", + "appflow:DescribeFlowExecution", + "appflow:DescribeFlowExecutionRecords", + "appflow:DescribeFlows", + "appflow:ListConnectorEntities", + "appflow:ListConnectorFields", + "appflow:ListConnectors", + "appflow:ListFlows", + "appflow:ListTagsForResource", + "application-autoscaling:Describe*", + "application-autoscaling:ListTagsForResource", + "application-signals:BatchGetServiceLevelObjectiveBudgetReport", + "application-signals:GetService", + "application-signals:GetServiceLevelObjective", + "application-signals:ListObservedEntities", + "application-signals:ListServiceDependencies", + "application-signals:ListServiceDependents", + "application-signals:ListServiceLevelObjectives", + "application-signals:ListServiceOperations", + "application-signals:ListServices", + "application-signals:ListTagsForResource", + "applicationinsights:Describe*", + "applicationinsights:List*", + "appmesh:Describe*", + "appmesh:List*", + "apprunner:DescribeAutoScalingConfiguration", + "apprunner:DescribeCustomDomains", + "apprunner:DescribeObservabilityConfiguration", + "apprunner:DescribeService", + "apprunner:DescribeVpcConnector", + "apprunner:DescribeVpcIngressConnection", + "apprunner:DescribeWebAclForService", + "apprunner:ListAssociatedServicesForWebAcl", + "apprunner:ListAutoScalingConfigurations", + "apprunner:ListConnections", + "apprunner:ListObservabilityConfigurations", + "apprunner:ListOperations", + "apprunner:ListServices", + "apprunner:ListServicesForAutoScalingConfiguration", + "apprunner:ListTagsForResource", + "apprunner:ListVpcConnectors", + "apprunner:ListVpcIngressConnections", + "appstream:Describe*", + "appstream:List*", + "appstudio:GetAccountStatus", + "appstudio:GetEnablementJobStatus", + "appsync:Get*", + "appsync:List*", + "apptest:GetTestCase", + "apptest:GetTestConfiguration", + "apptest:GetTestRunStep", + "apptest:GetTestSuite", + "apptest:ListTagsForResource", + "apptest:ListTestCases", + "apptest:ListTestConfigurations", + "apptest:ListTestRuns", + "apptest:ListTestRunSteps", + "apptest:ListTestRunTestCases", + "apptest:ListTestSuites", + "aps:DescribeAlertManagerDefinition", + "aps:DescribeLoggingConfiguration", + "aps:DescribeRuleGroupsNamespace", + "aps:DescribeScraper", + "aps:DescribeWorkspace", + "aps:GetAlertManagerSilence", + "aps:GetAlertManagerStatus", + "aps:GetDefaultScraperConfiguration", + "aps:GetLabels", + "aps:GetMetricMetadata", + "aps:GetSeries", + "aps:ListAlertManagerAlertGroups", + "aps:ListAlertManagerAlerts", + "aps:ListAlertManagerReceivers", + "aps:ListAlertManagerSilences", + "aps:ListAlerts", + "aps:ListRuleGroupsNamespaces", + "aps:ListRules", + "aps:ListScrapers", + "aps:ListTagsForResource", + "aps:ListWorkspaces", + "aps:QueryMetrics", + "arc-zonal-shift:GetAutoshiftObserverNotificationStatus", + "arc-zonal-shift:GetManagedResource", + "arc-zonal-shift:ListAutoshifts", + "arc-zonal-shift:ListManagedResources", + "arc-zonal-shift:ListZonalShifts", + "artifact:GetCustomerAgreement", + "artifact:GetReport", + "artifact:GetReportMetadata", + "artifact:GetTermForReport", + "artifact:ListAgreements", + "artifact:ListCustomerAgreements", + "artifact:ListReports", + "athena:Batch*", + "athena:Get*", + "athena:List*", + "auditmanager:GetAccountStatus", + "auditmanager:GetAssessment", + "auditmanager:GetAssessmentFramework", + "auditmanager:GetAssessmentReportUrl", + "auditmanager:GetChangeLogs", + "auditmanager:GetControl", + "auditmanager:GetDelegations", + "auditmanager:GetEvidence", + "auditmanager:GetEvidenceByEvidenceFolder", + "auditmanager:GetEvidenceFolder", + "auditmanager:GetEvidenceFoldersByAssessment", + "auditmanager:GetEvidenceFoldersByAssessmentControl", + "auditmanager:GetOrganizationAdminAccount", + "auditmanager:GetServicesInScope", + "auditmanager:GetSettings", + "auditmanager:ListAssessmentFrameworks", + "auditmanager:ListAssessmentReports", + "auditmanager:ListAssessments", + "auditmanager:ListControls", + "auditmanager:ListKeywordsForDataSource", + "auditmanager:ListNotifications", + "auditmanager:ListTagsForResource", + "auditmanager:ValidateAssessmentReportIntegrity", + "autoscaling-plans:Describe*", + "autoscaling-plans:GetScalingPlanResourceForecastData", + "autoscaling:Describe*", + "autoscaling:GetPredictiveScalingForecast", + "aws-portal:View*", + "backup-gateway:GetBandwidthRateLimitSchedule", + "backup-gateway:GetGateway", + "backup-gateway:GetHypervisor", + "backup-gateway:GetHypervisorPropertyMappings", + "backup-gateway:GetVirtualMachine", + "backup-gateway:ListGateways", + "backup-gateway:ListHypervisors", + "backup-gateway:ListTagsForResource", + "backup-gateway:ListVirtualMachines", + "backup:Describe*", + "backup:Get*", + "backup:List*", + "batch:Describe*", + "batch:List*", + "bedrock:GetAgent", + "bedrock:GetAgentActionGroup", + "bedrock:GetAgentAlias", + "bedrock:GetAgentKnowledgeBase", + "bedrock:GetAgentVersion", + "bedrock:GetCustomModel", + "bedrock:GetDataSource", + "bedrock:GetEvaluationJob", + "bedrock:GetFlow", + "bedrock:GetFlowAlias", + "bedrock:GetFlowVersion", + "bedrock:GetFoundationModel", + "bedrock:GetFoundationModelAvailability", + "bedrock:GetGuardrail", + "bedrock:GetInferenceProfile", + "bedrock:GetIngestionJob", + "bedrock:GetKnowledgeBase", + "bedrock:GetModelCustomizationJob", + "bedrock:GetModelInvocationLoggingConfiguration", + "bedrock:GetPrompt", + "bedrock:GetProvisionedModelThroughput", + "bedrock:GetUseCaseForModelAccess", + "bedrock:ListAgentActionGroups", + "bedrock:ListAgentAliases", + "bedrock:ListAgentKnowledgeBases", + "bedrock:ListAgents", + "bedrock:ListAgentVersions", + "bedrock:ListCustomModels", + "bedrock:ListDataSources", + "bedrock:ListEvaluationJobs", + "bedrock:ListFlowAliases", + "bedrock:ListFlows", + "bedrock:ListFlowVersions", + "bedrock:ListFoundationModelAgreementOffers", + "bedrock:ListFoundationModels", + "bedrock:ListGuardrails", + "bedrock:ListInferenceProfiles", + "bedrock:ListIngestionJobs", + "bedrock:ListKnowledgeBases", + "bedrock:ListModelCustomizationJobs", + "bedrock:ListPrompts", + "bedrock:ListProvisionedModelThroughputs", + "billing:GetBillingData", + "billing:GetBillingDetails", + "billing:GetBillingNotifications", + "billing:GetBillingPreferences", + "billing:GetContractInformation", + "billing:GetCredits", + "billing:GetIAMAccessPreference", + "billing:GetSellerOfRecord", + "billing:ListBillingViews", + "billingconductor:GetBillingGroupCostReport", + "billingconductor:ListAccountAssociations", + "billingconductor:ListBillingGroupCostReports", + "billingconductor:ListBillingGroups", + "billingconductor:ListCustomLineItems", + "billingconductor:ListCustomLineItemVersions", + "billingconductor:ListPricingPlans", + "billingconductor:ListPricingPlansAssociatedWithPricingRule", + "billingconductor:ListPricingRules", + "billingconductor:ListPricingRulesAssociatedToPricingPlan", + "billingconductor:ListResourcesAssociatedToCustomLineItem", + "billingconductor:ListTagsForResource", + "braket:GetDevice", + "braket:GetJob", + "braket:GetQuantumTask", + "braket:SearchDevices", + "braket:SearchJobs", + "braket:SearchQuantumTasks", + "budgets:Describe*", + "budgets:ListTagsForResource", + "budgets:View*", + "cassandra:Select", + "ce:DescribeCostCategoryDefinition", + "ce:DescribeNotificationSubscription", + "ce:DescribeReport", + "ce:GetAnomalies", + "ce:GetAnomalyMonitors", + "ce:GetAnomalySubscriptions", + "ce:GetApproximateUsageRecords", + "ce:GetCommitmentPurchaseAnalysis", + "ce:GetCostAndUsage", + "ce:GetCostAndUsageWithResources", + "ce:GetCostCategories", + "ce:GetCostForecast", + "ce:GetDimensionValues", + "ce:GetPreferences", + "ce:GetReservationCoverage", + "ce:GetReservationPurchaseRecommendation", + "ce:GetReservationUtilization", + "ce:GetRightsizingRecommendation", + "ce:GetSavingsPlanPurchaseRecommendationDetails", + "ce:GetSavingsPlansCoverage", + "ce:GetSavingsPlansPurchaseRecommendation", + "ce:GetSavingsPlansUtilization", + "ce:GetSavingsPlansUtilizationDetails", + "ce:GetTags", + "ce:GetUsageForecast", + "ce:ListCommitmentPurchaseAnalyses", + "ce:ListCostAllocationTagBackfillHistory", + "ce:ListCostAllocationTags", + "ce:ListCostCategoryDefinitions", + "ce:ListSavingsPlansPurchaseRecommendationGeneration", + "ce:ListTagsForResource", + "chatbot:Describe*", + "chatbot:Get*", + "chatbot:ListAssociations", + "chatbot:ListCustomActions", + "chatbot:ListMicrosoftTeamsChannelConfigurations", + "chatbot:ListMicrosoftTeamsConfiguredTeams", + "chatbot:ListMicrosoftTeamsUserIdentities", + "chatbot:ListTagsForResource", + "chime:Get*", + "chime:List*", + "chime:Retrieve*", + "chime:Search*", + "chime:Validate*", + "cleanrooms-ml:GetAudienceGenerationJob", + "cleanrooms-ml:GetAudienceModel", + "cleanrooms-ml:GetConfiguredAudienceModel", + "cleanrooms-ml:GetConfiguredAudienceModelPolicy", + "cleanrooms-ml:GetTrainingDataset", + "cleanrooms-ml:ListAudienceExportJobs", + "cleanrooms-ml:ListAudienceGenerationJobs", + "cleanrooms-ml:ListAudienceModels", + "cleanrooms-ml:ListConfiguredAudienceModels", + "cleanrooms-ml:ListTagsForResource", + "cleanrooms-ml:ListTrainingDatasets", + "cleanrooms:BatchGetCollaborationAnalysisTemplate", + "cleanrooms:BatchGetSchema", + "cleanrooms:BatchGetSchemaAnalysisRule", + "cleanrooms:GetAnalysisTemplate", + "cleanrooms:GetCollaboration", + "cleanrooms:GetCollaborationAnalysisTemplate", + "cleanrooms:GetCollaborationConfiguredAudienceModelAssociation", + "cleanrooms:GetCollaborationIdNamespaceAssociation", + "cleanrooms:GetCollaborationPrivacyBudgetTemplate", + "cleanrooms:GetConfiguredAudienceModelAssociation", + "cleanrooms:GetConfiguredTable", + "cleanrooms:GetConfiguredTableAnalysisRule", + "cleanrooms:GetConfiguredTableAssociation", + "cleanrooms:GetConfiguredTableAssociationAnalysisRule", + "cleanrooms:GetIdMappingTable", + "cleanrooms:GetIdNamespaceAssociation", + "cleanrooms:GetMembership", + "cleanrooms:GetPrivacyBudgetTemplate", + "cleanrooms:GetProtectedQuery", + "cleanrooms:GetSchema", + "cleanrooms:GetSchemaAnalysisRule", + "cleanrooms:ListAnalysisTemplates", + "cleanrooms:ListCollaborationAnalysisTemplates", + "cleanrooms:ListCollaborationConfiguredAudienceModelAssociations", + "cleanrooms:ListCollaborationIdNamespaceAssociations", + "cleanrooms:ListCollaborationPrivacyBudgets", + "cleanrooms:ListCollaborationPrivacyBudgetTemplates", + "cleanrooms:ListCollaborations", + "cleanrooms:ListConfiguredAudienceModelAssociations", + "cleanrooms:ListConfiguredTableAssociations", + "cleanrooms:ListConfiguredTables", + "cleanrooms:ListIdMappingTables", + "cleanrooms:ListIdNamespaceAssociations", + "cleanrooms:ListMembers", + "cleanrooms:ListMemberships", + "cleanrooms:ListPrivacyBudgets", + "cleanrooms:ListPrivacyBudgetTemplates", + "cleanrooms:ListProtectedQueries", + "cleanrooms:ListSchemas", + "cleanrooms:ListTagsForResource", + "cleanrooms:PreviewPrivacyImpact", + "cloud9:Describe*", + "cloud9:List*", + "clouddirectory:BatchRead", + "clouddirectory:Get*", + "clouddirectory:List*", + "clouddirectory:LookupPolicy", + "cloudformation:Describe*", + "cloudformation:Detect*", + "cloudformation:Estimate*", + "cloudformation:Get*", + "cloudformation:List*", + "cloudformation:ValidateTemplate", + "cloudfront-keyvaluestore:Describe*", + "cloudfront-keyvaluestore:Get*", + "cloudfront-keyvaluestore:List*", + "cloudfront:Describe*", + "cloudfront:Get*", + "cloudfront:List*", + "cloudhsm:Describe*", + "cloudhsm:List*", + "cloudsearch:Describe*", + "cloudsearch:List*", + "cloudtrail:Describe*", + "cloudtrail:Get*", + "cloudtrail:List*", + "cloudtrail:LookupEvents", + "cloudwatch:Describe*", + "cloudwatch:GenerateQuery", + "cloudwatch:Get*", + "cloudwatch:List*", + "codeartifact:DescribeDomain", + "codeartifact:DescribePackage", + "codeartifact:DescribePackageVersion", + "codeartifact:DescribeRepository", + "codeartifact:GetAuthorizationToken", + "codeartifact:GetDomainPermissionsPolicy", + "codeartifact:GetPackageVersionAsset", + "codeartifact:GetPackageVersionReadme", + "codeartifact:GetRepositoryEndpoint", + "codeartifact:GetRepositoryPermissionsPolicy", + "codeartifact:ListDomains", + "codeartifact:ListPackages", + "codeartifact:ListPackageVersionAssets", + "codeartifact:ListPackageVersionDependencies", + "codeartifact:ListPackageVersions", + "codeartifact:ListRepositories", + "codeartifact:ListRepositoriesInDomain", + "codeartifact:ListTagsForResource", + "codeartifact:ReadFromRepository", + "codebuild:BatchGet*", + "codebuild:DescribeCodeCoverages", + "codebuild:DescribeTestCases", + "codebuild:List*", + "codecatalyst:GetBillingAuthorization", + "codecatalyst:GetConnection", + "codecatalyst:GetPendingConnection", + "codecatalyst:ListConnections", + "codecatalyst:ListIamRolesForConnection", + "codecatalyst:ListTagsForResource", + "codecommit:BatchGet*", + "codecommit:Describe*", + "codecommit:Get*", + "codecommit:GitPull", + "codecommit:List*", + "codedeploy:BatchGet*", + "codedeploy:Get*", + "codedeploy:List*", + "codeguru-profiler:Describe*", + "codeguru-profiler:Get*", + "codeguru-profiler:List*", + "codeguru-reviewer:Describe*", + "codeguru-reviewer:Get*", + "codeguru-reviewer:List*", + "codepipeline:Get*", + "codepipeline:List*", + "codestar-connections:GetConnection", + "codestar-connections:GetHost", + "codestar-connections:GetRepositoryLink", + "codestar-connections:GetRepositorySyncStatus", + "codestar-connections:GetResourceSyncStatus", + "codestar-connections:GetSyncConfiguration", + "codestar-connections:ListConnections", + "codestar-connections:ListHosts", + "codestar-connections:ListRepositoryLinks", + "codestar-connections:ListRepositorySyncDefinitions", + "codestar-connections:ListSyncConfigurations", + "codestar-connections:ListTagsForResource", + "codestar-notifications:describeNotificationRule", + "codestar-notifications:listEventTypes", + "codestar-notifications:listNotificationRules", + "codestar-notifications:listTagsForResource", + "codestar-notifications:ListTargets", + "codestar:Describe*", + "codestar:Get*", + "codestar:List*", + "codestar:Verify*", + "cognito-identity:Describe*", + "cognito-identity:GetCredentialsForIdentity", + "cognito-identity:GetIdentityPoolAnalytics", + "cognito-identity:GetIdentityPoolDailyAnalytics", + "cognito-identity:GetIdentityPoolRoles", + "cognito-identity:GetIdentityProviderDailyAnalytics", + "cognito-identity:GetOpenIdToken", + "cognito-identity:GetOpenIdTokenForDeveloperIdentity", + "cognito-identity:List*", + "cognito-identity:Lookup*", + "cognito-idp:AdminGet*", + "cognito-idp:AdminList*", + "cognito-idp:Describe*", + "cognito-idp:Get*", + "cognito-idp:List*", + "cognito-sync:Describe*", + "cognito-sync:Get*", + "cognito-sync:List*", + "cognito-sync:QueryRecords", + "comprehend:BatchDetect*", + "comprehend:Classify*", + "comprehend:Contains*", + "comprehend:Describe*", + "comprehend:Detect*", + "comprehend:List*", + "compute-optimizer:DescribeRecommendationExportJobs", + "compute-optimizer:GetAutoScalingGroupRecommendations", + "compute-optimizer:GetEBSVolumeRecommendations", + "compute-optimizer:GetEC2InstanceRecommendations", + "compute-optimizer:GetEC2RecommendationProjectedMetrics", + "compute-optimizer:GetECSServiceRecommendationProjectedMetrics", + "compute-optimizer:GetECSServiceRecommendations", + "compute-optimizer:GetEffectiveRecommendationPreferences", + "compute-optimizer:GetEnrollmentStatus", + "compute-optimizer:GetEnrollmentStatusesForOrganization", + "compute-optimizer:GetIdleRecommendations", + "compute-optimizer:GetLambdaFunctionRecommendations", + "compute-optimizer:GetLicenseRecommendations", + "compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics", + "compute-optimizer:GetRDSDatabaseRecommendations", + "compute-optimizer:GetRecommendationPreferences", + "compute-optimizer:GetRecommendationSummaries", + "config:BatchGetAggregateResourceConfig", + "config:BatchGetResourceConfig", + "config:Deliver*", + "config:Describe*", + "config:Get*", + "config:List*", + "config:SelectAggregateResourceConfig", + "config:SelectResourceConfig", + "connect:Describe*", + "connect:GetContactAttributes", + "connect:GetCurrentMetricData", + "connect:GetCurrentUserData", + "connect:GetFederationToken", + "connect:GetMetricData", + "connect:GetMetricDataV2", + "connect:GetTaskTemplate", + "connect:GetTrafficDistribution", + "connect:List*", + "consoleapp:GetDeviceIdentity", + "consoleapp:ListDeviceIdentities", + "consolidatedbilling:GetAccountBillingRole", + "consolidatedbilling:ListLinkedAccounts", + "controlcatalog:ListCommonControls", + "controlcatalog:ListDomains", + "controlcatalog:ListObjectives", + "cost-optimization-hub:GetPreferences", + "cost-optimization-hub:GetRecommendation", + "cost-optimization-hub:ListEnrollmentStatuses", + "cost-optimization-hub:ListRecommendations", + "cost-optimization-hub:ListRecommendationSummaries", + "cur:GetClassicReport", + "cur:GetClassicReportPreferences", + "cur:GetUsageReport", + "customer-verification:GetCustomerVerificationDetails", + "customer-verification:GetCustomerVerificationEligibility", + "databrew:DescribeDataset", + "databrew:DescribeJob", + "databrew:DescribeJobRun", + "databrew:DescribeProject", + "databrew:DescribeRecipe", + "databrew:DescribeRuleset", + "databrew:DescribeSchedule", + "databrew:ListDatasets", + "databrew:ListJobRuns", + "databrew:ListJobs", + "databrew:ListProjects", + "databrew:ListRecipes", + "databrew:ListRecipeVersions", + "databrew:ListRulesets", + "databrew:ListSchedules", + "databrew:ListTagsForResource", + "dataexchange:Get*", + "dataexchange:List*", + "datapipeline:Describe*", + "datapipeline:EvaluateExpression", + "datapipeline:Get*", + "datapipeline:List*", + "datapipeline:QueryObjects", + "datapipeline:Validate*", + "datasync:Describe*", + "datasync:List*", + "datazone:GetAsset", + "datazone:GetAssetType", + "datazone:GetDataProduct", + "datazone:GetDataSource", + "datazone:GetDataSourceRun", + "datazone:GetDomain", + "datazone:GetDomainSharingPolicy", + "datazone:GetDomainUnit", + "datazone:GetEnvironment", + "datazone:GetEnvironmentAction", + "datazone:GetEnvironmentBlueprint", + "datazone:GetEnvironmentBlueprintConfiguration", + "datazone:GetEnvironmentProfile", + "datazone:GetFormType", + "datazone:GetGlossary", + "datazone:GetGlossaryTerm", + "datazone:GetGroupProfile", + "datazone:GetLineageNode", + "datazone:GetListing", + "datazone:GetMetadataGenerationRun", + "datazone:GetProject", + "datazone:GetProjectProfile", + "datazone:GetSubscription", + "datazone:GetSubscriptionEligibility", + "datazone:GetSubscriptionGrant", + "datazone:GetSubscriptionRequestDetails", + "datazone:GetSubscriptionTarget", + "datazone:GetTimeSeriesDataPoint", + "datazone:GetUserProfile", + "datazone:ListAccountEnvironments", + "datazone:ListAssetRevisions", + "datazone:ListDataProductRevisions", + "datazone:ListDataSourceRunActivities", + "datazone:ListDataSourceRuns", + "datazone:ListDataSources", + "datazone:ListDomains", + "datazone:ListDomainUnitsForParent", + "datazone:ListEntityOwners", + "datazone:ListEnvironmentActions", + "datazone:ListEnvironmentBlueprintConfigurations", + "datazone:ListEnvironmentBlueprintConfigurationSummaries", + "datazone:ListEnvironmentBlueprints", + "datazone:ListEnvironmentProfiles", + "datazone:ListEnvironments", + "datazone:ListGroupsForUser", + "datazone:ListLineageNodeHistory", + "datazone:ListNotifications", + "datazone:ListPolicyGrants", + "datazone:ListProjectMemberships", + "datazone:ListProjectProfiles", + "datazone:ListProjects", + "datazone:ListSubscriptionGrants", + "datazone:ListSubscriptionRequests", + "datazone:ListSubscriptions", + "datazone:ListSubscriptionTargets", + "datazone:ListTagsForResource", + "datazone:ListTimeSeriesDataPoints", + "datazone:Search", + "datazone:SearchGroupProfiles", + "datazone:SearchListings", + "datazone:SearchTypes", + "datazone:SearchUserProfiles", + "dax:BatchGetItem", + "dax:Describe*", + "dax:GetItem", + "dax:ListTags", + "dax:Query", + "dax:Scan", + "deadline:BatchGetJobEntity", + "deadline:GetApplicationVersion", + "deadline:GetBudget", + "deadline:GetFarm", + "deadline:GetFleet", + "deadline:GetJob", + "deadline:GetLicenseEndpoint", + "deadline:GetMonitor", + "deadline:GetQueue", + "deadline:GetQueueEnvironment", + "deadline:GetQueueFleetAssociation", + "deadline:GetSession", + "deadline:GetSessionAction", + "deadline:GetSessionsStatisticsAggregation", + "deadline:GetStep", + "deadline:GetStorageProfile", + "deadline:GetStorageProfileForQueue", + "deadline:GetTask", + "deadline:GetWorker", + "deadline:ListAvailableMeteredProducts", + "deadline:ListBudgets", + "deadline:ListFarmMembers", + "deadline:ListFarms", + "deadline:ListFleetMembers", + "deadline:ListFleets", + "deadline:ListJobMembers", + "deadline:ListJobParameterDefinitions", + "deadline:ListJobs", + "deadline:ListLicenseEndpoints", + "deadline:ListMeteredProducts", + "deadline:ListMonitors", + "deadline:ListQueueEnvironments", + "deadline:ListQueueFleetAssociations", + "deadline:ListQueueMembers", + "deadline:ListQueues", + "deadline:ListSessionActions", + "deadline:ListSessions", + "deadline:ListSessionsForWorker", + "deadline:ListStepConsumers", + "deadline:ListStepDependencies", + "deadline:ListSteps", + "deadline:ListStorageProfiles", + "deadline:ListStorageProfilesForQueue", + "deadline:ListTagsForResource", + "deadline:ListTasks", + "deadline:ListWorkers", + "deadline:SearchJobs", + "deadline:SearchSteps", + "deadline:SearchTasks", + "deadline:SearchWorkers", + "deepcomposer:GetComposition", + "deepcomposer:GetModel", + "deepcomposer:GetSampleModel", + "deepcomposer:ListCompositions", + "deepcomposer:ListModels", + "deepcomposer:ListSampleModels", + "deepcomposer:ListTrainingTopics", + "detective:BatchGetGraphMemberDatasources", + "detective:BatchGetMembershipDatasources", + "detective:Get*", + "detective:List*", + "detective:SearchGraph", + "devicefarm:Get*", + "devicefarm:List*", + "devops-guru:DescribeAccountHealth", + "devops-guru:DescribeAccountOverview", + "devops-guru:DescribeAnomaly", + "devops-guru:DescribeEventSourcesConfig", + "devops-guru:DescribeFeedback", + "devops-guru:DescribeInsight", + "devops-guru:DescribeOrganizationHealth", + "devops-guru:DescribeOrganizationOverview", + "devops-guru:DescribeOrganizationResourceCollectionHealth", + "devops-guru:DescribeResourceCollectionHealth", + "devops-guru:DescribeServiceIntegration", + "devops-guru:GetCostEstimation", + "devops-guru:GetResourceCollection", + "devops-guru:ListAnomaliesForInsight", + "devops-guru:ListAnomalousLogGroups", + "devops-guru:ListEvents", + "devops-guru:ListInsights", + "devops-guru:ListMonitoredResources", + "devops-guru:ListNotificationChannels", + "devops-guru:ListOrganizationInsights", + "devops-guru:ListRecommendations", + "devops-guru:SearchInsights", + "devops-guru:StartCostEstimation", + "directconnect:Describe*", + "discovery:Describe*", + "discovery:Get*", + "discovery:List*", + "dlm:Get*", + "dms:Describe*", + "dms:List*", + "dms:Test*", + "drs:DescribeJobLogItems", + "drs:DescribeJobs", + "drs:DescribeLaunchConfigurationTemplates", + "drs:DescribeRecoveryInstances", + "drs:DescribeRecoverySnapshots", + "drs:DescribeReplicationConfigurationTemplates", + "drs:DescribeSourceNetworks", + "drs:DescribeSourceServers", + "drs:GetFailbackReplicationConfiguration", + "drs:GetLaunchConfiguration", + "drs:GetReplicationConfiguration", + "drs:ListExtensibleSourceServers", + "drs:ListLaunchActions", + "drs:ListStagingAccounts", + "drs:ListTagsForResource", + "ds:Check*", + "ds:Describe*", + "ds:Get*", + "ds:List*", + "ds:Verify*", + "dsql:GetCluster", + "dsql:ListClusters", + "dsql:ListTagsForResource", + "dynamodb:BatchGet*", + "dynamodb:Describe*", + "dynamodb:Get*", + "dynamodb:List*", + "dynamodb:PartiQLSelect", + "dynamodb:Query", + "dynamodb:Scan", + "ec2:Describe*", + "ec2:DescribeInstanceImageMetadata", + "ec2:Get*", + "ec2:ListImagesInRecycleBin", + "ec2:ListSnapshotsInRecycleBin", + "ec2:SearchLocalGatewayRoutes", + "ec2:SearchTransitGatewayRoutes", + "ec2messages:Get*", + "ecr-public:BatchCheckLayerAvailability", + "ecr-public:DescribeImages", + "ecr-public:DescribeImageTags", + "ecr-public:DescribeRegistries", + "ecr-public:DescribeRepositories", + "ecr-public:GetAuthorizationToken", + "ecr-public:GetRegistryCatalogData", + "ecr-public:GetRepositoryCatalogData", + "ecr-public:GetRepositoryPolicy", + "ecr-public:ListTagsForResource", + "ecr:BatchCheck*", + "ecr:BatchGet*", + "ecr:Describe*", + "ecr:Get*", + "ecr:List*", + "ecs:Describe*", + "ecs:List*", + "eks:Describe*", + "eks:List*", + "elastic-inference:DescribeAcceleratorOfferings", + "elastic-inference:DescribeAccelerators", + "elastic-inference:DescribeAcceleratorTypes", + "elastic-inference:ListTagsForResource", + "elasticache:Describe*", + "elasticache:List*", + "elasticbeanstalk:Check*", + "elasticbeanstalk:Describe*", + "elasticbeanstalk:List*", + "elasticbeanstalk:Request*", + "elasticbeanstalk:Retrieve*", + "elasticbeanstalk:Validate*", + "elasticfilesystem:Describe*", + "elasticfilesystem:ListTagsForResource", + "elasticloadbalancing:Describe*", + "elasticmapreduce:Describe*", + "elasticmapreduce:GetBlockPublicAccessConfiguration", + "elasticmapreduce:List*", + "elasticmapreduce:View*", + "elastictranscoder:List*", + "elastictranscoder:Read*", + "elemental-appliances-software:Get*", + "elemental-appliances-software:List*", + "emr-containers:DescribeJobRun", + "emr-containers:DescribeManagedEndpoint", + "emr-containers:DescribeVirtualCluster", + "emr-containers:ListJobRuns", + "emr-containers:ListManagedEndpoints", + "emr-containers:ListTagsForResource", + "emr-containers:ListVirtualClusters", + "emr-serverless:GetApplication", + "emr-serverless:GetDashboardForJobRun", + "emr-serverless:GetJobRun", + "emr-serverless:ListApplications", + "emr-serverless:ListJobRuns", + "emr-serverless:ListTagsForResource", + "es:Describe*", + "es:ESHttpGet", + "es:ESHttpHead", + "es:Get*", + "es:List*", + "events:Describe*", + "events:List*", + "events:Test*", + "evidently:GetExperiment", + "evidently:GetExperimentResults", + "evidently:GetFeature", + "evidently:GetLaunch", + "evidently:GetProject", + "evidently:GetSegment", + "evidently:ListExperiments", + "evidently:ListFeatures", + "evidently:ListLaunches", + "evidently:ListProjects", + "evidently:ListSegmentReferences", + "evidently:ListSegments", + "evidently:ListTagsForResource", + "evidently:TestSegmentPattern", + "firehose:Describe*", + "firehose:List*", + "fis:GetAction", + "fis:GetExperiment", + "fis:GetExperimentTargetAccountConfiguration", + "fis:GetExperimentTemplate", + "fis:GetTargetAccountConfiguration", + "fis:GetTargetResourceType", + "fis:ListActions", + "fis:ListExperimentResolvedTargets", + "fis:ListExperiments", + "fis:ListExperimentTargetAccountConfigurations", + "fis:ListExperimentTemplates", + "fis:ListTagsForResource", + "fis:ListTargetAccountConfigurations", + "fis:ListTargetResourceTypes", + "fms:GetAdminAccount", + "fms:GetAppsList", + "fms:GetComplianceDetail", + "fms:GetNotificationChannel", + "fms:GetPolicy", + "fms:GetProtectionStatus", + "fms:GetProtocolsList", + "fms:GetViolationDetails", + "fms:ListAppsLists", + "fms:ListComplianceStatus", + "fms:ListMemberAccounts", + "fms:ListPolicies", + "fms:ListProtocolsLists", + "fms:ListTagsForResource", + "forecast:DescribeAutoPredictor", + "forecast:DescribeDataset", + "forecast:DescribeDatasetGroup", + "forecast:DescribeDatasetImportJob", + "forecast:DescribeExplainability", + "forecast:DescribeExplainabilityExport", + "forecast:DescribeForecast", + "forecast:DescribeForecastExportJob", + "forecast:DescribeMonitor", + "forecast:DescribePredictor", + "forecast:DescribePredictorBacktestExportJob", + "forecast:DescribeWhatIfAnalysis", + "forecast:DescribeWhatIfForecast", + "forecast:DescribeWhatIfForecastExport", + "forecast:GetAccuracyMetrics", + "forecast:ListDatasetGroups", + "forecast:ListDatasetImportJobs", + "forecast:ListDatasets", + "forecast:ListExplainabilities", + "forecast:ListExplainabilityExports", + "forecast:ListForecastExportJobs", + "forecast:ListForecasts", + "forecast:ListMonitorEvaluations", + "forecast:ListMonitors", + "forecast:ListPredictorBacktestExportJobs", + "forecast:ListPredictors", + "forecast:ListWhatIfAnalyses", + "forecast:ListWhatIfForecastExports", + "forecast:ListWhatIfForecasts", + "forecast:QueryForecast", + "forecast:QueryWhatIfForecast", + "frauddetector:BatchGetVariable", + "frauddetector:DescribeDetector", + "frauddetector:DescribeModelVersions", + "frauddetector:GetBatchImportJobs", + "frauddetector:GetBatchPredictionJobs", + "frauddetector:GetDeleteEventsByEventTypeStatus", + "frauddetector:GetDetectors", + "frauddetector:GetDetectorVersion", + "frauddetector:GetEntityTypes", + "frauddetector:GetEvent", + "frauddetector:GetEventPredictionMetadata", + "frauddetector:GetEventTypes", + "frauddetector:GetExternalModels", + "frauddetector:GetKMSEncryptionKey", + "frauddetector:GetLabels", + "frauddetector:GetListElements", + "frauddetector:GetListsMetadata", + "frauddetector:GetModels", + "frauddetector:GetModelVersion", + "frauddetector:GetOutcomes", + "frauddetector:GetRules", + "frauddetector:GetVariables", + "frauddetector:ListEventPredictions", + "frauddetector:ListTagsForResource", + "freertos:Describe*", + "freertos:List*", + "freetier:GetFreeTierAlertPreference", + "freetier:GetFreeTierUsage", + "fsx:Describe*", + "fsx:List*", + "gamelift:Describe*", + "gamelift:Get*", + "gamelift:List*", + "gamelift:ResolveAlias", + "gamelift:Search*", + "glacier:Describe*", + "glacier:Get*", + "glacier:List*", + "globalaccelerator:Describe*", + "globalaccelerator:List*", + "glue:BatchGetCrawlers", + "glue:BatchGetDevEndpoints", + "glue:BatchGetJobs", + "glue:BatchGetPartition", + "glue:BatchGetTableOptimizer", + "glue:BatchGetTriggers", + "glue:BatchGetWorkflows", + "glue:CheckSchemaVersionValidity", + "glue:GetCatalogImportStatus", + "glue:GetClassifier", + "glue:GetClassifiers", + "glue:GetCrawler", + "glue:GetCrawlerMetrics", + "glue:GetCrawlers", + "glue:GetDatabase", + "glue:GetDatabases", + "glue:GetDataCatalogEncryptionSettings", + "glue:GetDataflowGraph", + "glue:GetDevEndpoint", + "glue:GetDevEndpoints", + "glue:GetJob", + "glue:GetJobBookmark", + "glue:GetJobRun", + "glue:GetJobRuns", + "glue:GetJobs", + "glue:GetMapping", + "glue:GetMLTaskRun", + "glue:GetMLTaskRuns", + "glue:GetMLTransform", + "glue:GetMLTransforms", + "glue:GetPartition", + "glue:GetPartitions", + "glue:GetPlan", + "glue:GetRegistry", + "glue:GetResourcePolicy", + "glue:GetSchema", + "glue:GetSchemaByDefinition", + "glue:GetSchemaVersion", + "glue:GetSchemaVersionsDiff", + "glue:GetSecurityConfiguration", + "glue:GetSecurityConfigurations", + "glue:GetSession", + "glue:GetStatement", + "glue:GetTable", + "glue:GetTableOptimizer", + "glue:GetTables", + "glue:GetTableVersion", + "glue:GetTableVersions", + "glue:GetTags", + "glue:GetTrigger", + "glue:GetTriggers", + "glue:GetUserDefinedFunction", + "glue:GetUserDefinedFunctions", + "glue:GetWorkflow", + "glue:GetWorkflowRun", + "glue:GetWorkflowRunProperties", + "glue:GetWorkflowRuns", + "glue:ListCrawlers", + "glue:ListCrawls", + "glue:ListDevEndpoints", + "glue:ListJobs", + "glue:ListMLTransforms", + "glue:ListRegistries", + "glue:ListSchemas", + "glue:ListSchemaVersions", + "glue:ListSessions", + "glue:ListStatements", + "glue:ListTableOptimizerRuns", + "glue:ListTriggers", + "glue:ListWorkflows", + "glue:QuerySchemaVersionMetadata", + "glue:SearchTables", + "grafana:DescribeWorkspace", + "grafana:DescribeWorkspaceAuthentication", + "grafana:DescribeWorkspaceConfiguration", + "grafana:ListPermissions", + "grafana:ListTagsForResource", + "grafana:ListVersions", + "grafana:ListWorkspaces", + "greengrass:DescribeComponent", + "greengrass:Get*", + "greengrass:List*", + "groundstation:DescribeContact", + "groundstation:GetConfig", + "groundstation:GetDataflowEndpointGroup", + "groundstation:GetMinuteUsage", + "groundstation:GetMissionProfile", + "groundstation:GetSatellite", + "groundstation:ListConfigs", + "groundstation:ListContacts", + "groundstation:ListDataflowEndpointGroups", + "groundstation:ListGroundStations", + "groundstation:ListMissionProfiles", + "groundstation:ListSatellites", + "groundstation:ListTagsForResource", + "guardduty:Describe*", + "guardduty:Get*", + "guardduty:List*", + "health:Describe*", + "healthlake:DescribeFHIRDatastore", + "healthlake:DescribeFHIRExportJob", + "healthlake:DescribeFHIRImportJob", + "healthlake:GetCapabilities", + "healthlake:ListFHIRDatastores", + "healthlake:ListFHIRExportJobs", + "healthlake:ListFHIRImportJobs", + "healthlake:ListTagsForResource", + "healthlake:ReadResource", + "healthlake:SearchWithGet", + "healthlake:SearchWithPost", + "iam:Generate*", + "iam:Get*", + "iam:List*", + "iam:Simulate*", + "identity-sync:GetSyncProfile", + "identity-sync:GetSyncTarget", + "identity-sync:ListSyncFilters", + "identitystore-auth:BatchGetSession", + "identitystore-auth:ListSessions", + "identitystore:DescribeGroup", + "identitystore:DescribeGroupMembership", + "identitystore:DescribeUser", + "identitystore:GetGroupId", + "identitystore:GetGroupMembershipId", + "identitystore:GetUserId", + "identitystore:IsMemberInGroups", + "identitystore:ListGroupMemberships", + "identitystore:ListGroupMembershipsForMember", + "identitystore:ListGroups", + "identitystore:ListUsers", + "imagebuilder:Get*", + "imagebuilder:List*", + "importexport:Get*", + "importexport:List*", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", + "inspector2:BatchGetAccountStatus", + "inspector2:BatchGetFreeTrialInfo", + "inspector2:DescribeOrganizationConfiguration", + "inspector2:GetDelegatedAdminAccount", + "inspector2:GetFindingsReportStatus", + "inspector2:GetMember", + "inspector2:ListAccountPermissions", + "inspector2:ListCisScans", + "inspector2:ListCoverage", + "inspector2:ListCoverageStatistics", + "inspector2:ListDelegatedAdminAccounts", + "inspector2:ListFilters", + "inspector2:ListFindingAggregations", + "inspector2:ListFindings", + "inspector2:ListMembers", + "inspector2:ListTagsForResource", + "inspector2:ListUsageTotals", + "internetmonitor:GetHealthEvent", + "internetmonitor:GetInternetEvent", + "internetmonitor:GetMonitor", + "internetmonitor:ListHealthEvents", + "internetmonitor:ListInternetEvents", + "internetmonitor:ListMonitors", + "internetmonitor:ListTagsForResource", + "invoicing:GetInvoiceEmailDeliveryPreferences", + "invoicing:GetInvoicePDF", + "invoicing:ListInvoiceSummaries", + "iot:Describe*", + "iot:Get*", + "iot:List*", + "iot1click:DescribeDevice", + "iot1click:DescribePlacement", + "iot1click:DescribeProject", + "iot1click:GetDeviceMethods", + "iot1click:GetDevicesInPlacement", + "iot1click:ListDeviceEvents", + "iot1click:ListDevices", + "iot1click:ListPlacements", + "iot1click:ListProjects", + "iot1click:ListTagsForResource", + "iotanalytics:Describe*", + "iotanalytics:Get*", + "iotanalytics:List*", + "iotanalytics:SampleChannelData", + "iotevents:DescribeAlarm", + "iotevents:DescribeAlarmModel", + "iotevents:DescribeDetector", + "iotevents:DescribeDetectorModel", + "iotevents:DescribeInput", + "iotevents:DescribeLoggingOptions", + "iotevents:ListAlarmModels", + "iotevents:ListAlarmModelVersions", + "iotevents:ListAlarms", + "iotevents:ListDetectorModels", + "iotevents:ListDetectorModelVersions", + "iotevents:ListDetectors", + "iotevents:ListInputs", + "iotevents:ListTagsForResource", + "iotfleethub:DescribeApplication", + "iotfleethub:ListApplications", + "iotfleetwise:GetCampaign", + "iotfleetwise:GetDecoderManifest", + "iotfleetwise:GetFleet", + "iotfleetwise:GetLoggingOptions", + "iotfleetwise:GetModelManifest", + "iotfleetwise:GetRegisterAccountStatus", + "iotfleetwise:GetSignalCatalog", + "iotfleetwise:GetVehicle", + "iotfleetwise:GetVehicleStatus", + "iotfleetwise:ListCampaigns", + "iotfleetwise:ListDecoderManifestNetworkInterfaces", + "iotfleetwise:ListDecoderManifests", + "iotfleetwise:ListDecoderManifestSignals", + "iotfleetwise:ListFleets", + "iotfleetwise:ListFleetsForVehicle", + "iotfleetwise:ListModelManifestNodes", + "iotfleetwise:ListModelManifests", + "iotfleetwise:ListSignalCatalogNodes", + "iotfleetwise:ListSignalCatalogs", + "iotfleetwise:ListTagsForResource", + "iotfleetwise:ListVehicles", + "iotfleetwise:ListVehiclesInFleet", + "iotroborunner:GetDestination", + "iotroborunner:GetSite", + "iotroborunner:GetWorker", + "iotroborunner:GetWorkerFleet", + "iotroborunner:ListDestinations", + "iotroborunner:ListSites", + "iotroborunner:ListWorkerFleets", + "iotroborunner:ListWorkers", + "iotsitewise:Describe*", + "iotsitewise:Get*", + "iotsitewise:List*", + "iotwireless:GetDestination", + "iotwireless:GetDeviceProfile", + "iotwireless:GetEventConfigurationByResourceTypes", + "iotwireless:GetFuotaTask", + "iotwireless:GetLogLevelsByResourceTypes", + "iotwireless:GetMetricConfiguration", + "iotwireless:GetMetrics", + "iotwireless:GetMulticastGroup", + "iotwireless:GetMulticastGroupSession", + "iotwireless:GetNetworkAnalyzerConfiguration", + "iotwireless:GetPartnerAccount", + "iotwireless:GetPosition", + "iotwireless:GetPositionConfiguration", + "iotwireless:GetPositionEstimate", + "iotwireless:GetResourceEventConfiguration", + "iotwireless:GetResourceLogLevel", + "iotwireless:GetResourcePosition", + "iotwireless:GetServiceEndpoint", + "iotwireless:GetServiceProfile", + "iotwireless:GetWirelessDevice", + "iotwireless:GetWirelessDeviceImportTask", + "iotwireless:GetWirelessDeviceStatistics", + "iotwireless:GetWirelessGateway", + "iotwireless:GetWirelessGatewayCertificate", + "iotwireless:GetWirelessGatewayFirmwareInformation", + "iotwireless:GetWirelessGatewayStatistics", + "iotwireless:GetWirelessGatewayTask", + "iotwireless:GetWirelessGatewayTaskDefinition", + "iotwireless:ListDestinations", + "iotwireless:ListDeviceProfiles", + "iotwireless:ListDevicesForWirelessDeviceImportTask", + "iotwireless:ListEventConfigurations", + "iotwireless:ListFuotaTasks", + "iotwireless:ListMulticastGroups", + "iotwireless:ListMulticastGroupsByFuotaTask", + "iotwireless:ListNetworkAnalyzerConfigurations", + "iotwireless:ListPartnerAccounts", + "iotwireless:ListPositionConfigurations", + "iotwireless:ListQueuedMessages", + "iotwireless:ListServiceProfiles", + "iotwireless:ListTagsForResource", + "iotwireless:ListWirelessDeviceImportTasks", + "iotwireless:ListWirelessDevices", + "iotwireless:ListWirelessGateways", + "iotwireless:ListWirelessGatewayTaskDefinitions", + "ivs:BatchGetChannel", + "ivs:GetChannel", + "ivs:GetComposition", + "ivs:GetEncoderConfiguration", + "ivs:GetIngestConfiguration", + "ivs:GetParticipant", + "ivs:GetPlaybackKeyPair", + "ivs:GetPlaybackRestrictionPolicy", + "ivs:GetPublicKey", + "ivs:GetRecordingConfiguration", + "ivs:GetStage", + "ivs:GetStageSession", + "ivs:GetStorageConfiguration", + "ivs:GetStream", + "ivs:GetStreamSession", + "ivs:ListChannels", + "ivs:ListCompositions", + "ivs:ListEncoderConfigurations", + "ivs:ListIngestConfigurations", + "ivs:ListParticipantEvents", + "ivs:ListParticipants", + "ivs:ListPlaybackKeyPairs", + "ivs:ListPlaybackRestrictionPolicies", + "ivs:ListPublicKeys", + "ivs:ListRecordingConfigurations", + "ivs:ListStages", + "ivs:ListStageSessions", + "ivs:ListStorageConfigurations", + "ivs:ListStreamKeys", + "ivs:ListStreams", + "ivs:ListStreamSessions", + "ivs:ListTagsForResource", + "ivschat:GetLoggingConfiguration", + "ivschat:GetRoom", + "ivschat:ListLoggingConfigurations", + "ivschat:ListRooms", + "ivschat:ListTagsForResource", + "kafka:Describe*", + "kafka:DescribeCluster", + "kafka:DescribeClusterOperation", + "kafka:DescribeClusterV2", + "kafka:DescribeConfiguration", + "kafka:DescribeConfigurationRevision", + "kafka:Get*", + "kafka:GetBootstrapBrokers", + "kafka:GetCompatibleKafkaVersions", + "kafka:List*", + "kafka:ListClusterOperations", + "kafka:ListClusters", + "kafka:ListClustersV2", + "kafka:ListConfigurationRevisions", + "kafka:ListConfigurations", + "kafka:ListKafkaVersions", + "kafka:ListNodes", + "kafka:ListTagsForResource", + "kafkaconnect:DescribeConnector", + "kafkaconnect:DescribeCustomPlugin", + "kafkaconnect:DescribeWorkerConfiguration", + "kafkaconnect:ListConnectors", + "kafkaconnect:ListCustomPlugins", + "kafkaconnect:ListWorkerConfigurations", + "kendra:BatchGetDocumentStatus", + "kendra:DescribeDataSource", + "kendra:DescribeExperience", + "kendra:DescribeFaq", + "kendra:DescribeIndex", + "kendra:DescribePrincipalMapping", + "kendra:DescribeQuerySuggestionsBlockList", + "kendra:DescribeQuerySuggestionsConfig", + "kendra:DescribeThesaurus", + "kendra:GetQuerySuggestions", + "kendra:GetSnapshots", + "kendra:ListDataSources", + "kendra:ListDataSourceSyncJobs", + "kendra:ListEntityPersonas", + "kendra:ListExperienceEntities", + "kendra:ListExperiences", + "kendra:ListFaqs", + "kendra:ListGroupsOlderThanOrderingId", + "kendra:ListIndices", + "kendra:ListQuerySuggestionsBlockLists", + "kendra:ListTagsForResource", + "kendra:ListThesauri", + "kendra:Query", + "kinesis:Describe*", + "kinesis:Get*", + "kinesis:List*", + "kinesisanalytics:Describe*", + "kinesisanalytics:Discover*", + "kinesisanalytics:Get*", + "kinesisanalytics:List*", + "kinesisvideo:Describe*", + "kinesisvideo:Get*", + "kinesisvideo:List*", + "kms:Describe*", + "kms:Get*", + "kms:List*", + "lakeformation:DescribeResource", + "lakeformation:GetDataCellsFilter", + "lakeformation:GetDataLakeSettings", + "lakeformation:GetEffectivePermissionsForPath", + "lakeformation:GetLfTag", + "lakeformation:GetResourceLfTags", + "lakeformation:ListDataCellsFilter", + "lakeformation:ListLfTags", + "lakeformation:ListPermissions", + "lakeformation:ListResources", + "lakeformation:ListTableStorageOptimizers", + "lakeformation:SearchDatabasesByLfTags", + "lakeformation:SearchTablesByLfTags", + "lambda:Get*", + "lambda:List*", + "launchwizard:DescribeAdditionalNode", + "launchwizard:DescribeProvisionedApp", + "launchwizard:DescribeProvisioningEvents", + "launchwizard:DescribeSettingsSet", + "launchwizard:GetDeployment", + "launchwizard:GetInfrastructureSuggestion", + "launchwizard:GetIpAddress", + "launchwizard:GetResourceCostEstimate", + "launchwizard:GetResourceRecommendation", + "launchwizard:GetSettingsSet", + "launchwizard:GetWorkload", + "launchwizard:GetWorkloadAsset", + "launchwizard:GetWorkloadAssets", + "launchwizard:GetWorkloadDeploymentPattern", + "launchwizard:ListAdditionalNodes", + "launchwizard:ListAllowedResources", + "launchwizard:ListDeploymentEvents", + "launchwizard:ListDeployments", + "launchwizard:ListProvisionedApps", + "launchwizard:ListResourceCostEstimates", + "launchwizard:ListSettingsSets", + "launchwizard:ListTagsForResource", + "launchwizard:ListWorkloadDeploymentOptions", + "launchwizard:ListWorkloadDeploymentPatterns", + "launchwizard:ListWorkloads", + "lex:DescribeBot", + "lex:DescribeBotAlias", + "lex:DescribeBotChannel", + "lex:DescribeBotLocale", + "lex:DescribeBotReplica", + "lex:DescribeBotVersion", + "lex:DescribeExport", + "lex:DescribeImport", + "lex:DescribeIntent", + "lex:DescribeResourcePolicy", + "lex:DescribeSlot", + "lex:DescribeSlotType", + "lex:Get*", + "lex:ListBotAliases", + "lex:ListBotAliasReplicas", + "lex:ListBotChannels", + "lex:ListBotLocales", + "lex:ListBotReplicas", + "lex:ListBots", + "lex:ListBotVersionReplicas", + "lex:ListBotVersions", + "lex:ListBuiltInIntents", + "lex:ListBuiltInSlotTypes", + "lex:ListExports", + "lex:ListImports", + "lex:ListIntents", + "lex:ListSlots", + "lex:ListSlotTypes", + "lex:ListTagsForResource", + "license-manager:Get*", + "license-manager:List*", + "lightsail:GetActiveNames", + "lightsail:GetAlarms", + "lightsail:GetAutoSnapshots", + "lightsail:GetBlueprints", + "lightsail:GetBucketAccessKeys", + "lightsail:GetBucketBundles", + "lightsail:GetBucketMetricData", + "lightsail:GetBuckets", + "lightsail:GetBundles", + "lightsail:GetCertificates", + "lightsail:GetCloudFormationStackRecords", + "lightsail:GetContainerAPIMetadata", + "lightsail:GetContainerImages", + "lightsail:GetContainerServiceDeployments", + "lightsail:GetContainerServiceMetricData", + "lightsail:GetContainerServicePowers", + "lightsail:GetContainerServices", + "lightsail:GetDisk", + "lightsail:GetDisks", + "lightsail:GetDiskSnapshot", + "lightsail:GetDiskSnapshots", + "lightsail:GetDistributionBundles", + "lightsail:GetDistributionLatestCacheReset", + "lightsail:GetDistributionMetricData", + "lightsail:GetDistributions", + "lightsail:GetDomain", + "lightsail:GetDomains", + "lightsail:GetExportSnapshotRecords", + "lightsail:GetInstance", + "lightsail:GetInstanceMetricData", + "lightsail:GetInstancePortStates", + "lightsail:GetInstances", + "lightsail:GetInstanceSnapshot", + "lightsail:GetInstanceSnapshots", + "lightsail:GetInstanceState", + "lightsail:GetKeyPair", + "lightsail:GetKeyPairs", + "lightsail:GetLoadBalancer", + "lightsail:GetLoadBalancerMetricData", + "lightsail:GetLoadBalancers", + "lightsail:GetLoadBalancerTlsCertificates", + "lightsail:GetOperation", + "lightsail:GetOperations", + "lightsail:GetOperationsForResource", + "lightsail:GetRegions", + "lightsail:GetRelationalDatabase", + "lightsail:GetRelationalDatabaseBlueprints", + "lightsail:GetRelationalDatabaseBundles", + "lightsail:GetRelationalDatabaseEvents", + "lightsail:GetRelationalDatabaseLogEvents", + "lightsail:GetRelationalDatabaseLogStreams", + "lightsail:GetRelationalDatabaseMetricData", + "lightsail:GetRelationalDatabaseParameters", + "lightsail:GetRelationalDatabases", + "lightsail:GetRelationalDatabaseSnapshot", + "lightsail:GetRelationalDatabaseSnapshots", + "lightsail:GetStaticIp", + "lightsail:GetStaticIps", + "lightsail:Is*", + "logs:Describe*", + "logs:FilterLogEvents", + "logs:Get*", + "logs:ListIntegrations", + "logs:ListAnomalies", + "logs:ListEntitiesForLogGroup", + "logs:ListLogAnomalyDetectors", + "logs:ListLogDeliveries", + "logs:ListLogGroupsForEntity", + "logs:ListLogGroupsForQuery", + "logs:ListTagsForResource", + "logs:ListTagsLogGroup", + "logs:StartLiveTail", + "logs:StartQuery", + "logs:StopLiveTail", + "logs:StopQuery", + "logs:TestMetricFilter", + "lookoutequipment:DescribeDataIngestionJob", + "lookoutequipment:DescribeDataset", + "lookoutequipment:DescribeInferenceScheduler", + "lookoutequipment:DescribeLabel", + "lookoutequipment:DescribeLabelGroup", + "lookoutequipment:DescribeModel", + "lookoutequipment:DescribeModelVersion", + "lookoutequipment:DescribeResourcePolicy", + "lookoutequipment:DescribeRetrainingScheduler", + "lookoutequipment:ListDataIngestionJobs", + "lookoutequipment:ListDatasets", + "lookoutequipment:ListInferenceEvents", + "lookoutequipment:ListInferenceExecutions", + "lookoutequipment:ListInferenceSchedulers", + "lookoutequipment:ListLabelGroups", + "lookoutequipment:ListLabels", + "lookoutequipment:ListModels", + "lookoutequipment:ListModelVersions", + "lookoutequipment:ListRetrainingSchedulers", + "lookoutequipment:ListSensorStatistics", + "lookoutequipment:ListTagsForResource", + "lookoutmetrics:Describe*", + "lookoutmetrics:Get*", + "lookoutmetrics:List*", + "lookoutvision:DescribeDataset", + "lookoutvision:DescribeModel", + "lookoutvision:DescribeModelPackagingJob", + "lookoutvision:DescribeProject", + "lookoutvision:ListDatasetEntries", + "lookoutvision:ListModelPackagingJobs", + "lookoutvision:ListModels", + "lookoutvision:ListProjects", + "lookoutvision:ListTagsForResource", + "m2:GetApplication", + "m2:GetApplicationVersion", + "m2:GetBatchJobExecution", + "m2:GetDataSetDetails", + "m2:GetDataSetImportTask", + "m2:GetDeployment", + "m2:GetEnvironment", + "m2:ListApplications", + "m2:ListApplicationVersions", + "m2:ListBatchJobDefinitions", + "m2:ListBatchJobExecutions", + "m2:ListDataSetImportHistory", + "m2:ListDataSets", + "m2:ListDeployments", + "m2:ListEngineVersions", + "m2:ListEnvironments", + "m2:ListTagsForResource", + "machinelearning:Describe*", + "machinelearning:Get*", + "macie2:BatchGetCustomDataIdentifiers", + "macie2:DescribeBuckets", + "macie2:DescribeClassificationJob", + "macie2:DescribeOrganizationConfiguration", + "macie2:GetAdministratorAccount", + "macie2:GetAllowList", + "macie2:GetAutomatedDiscoveryConfiguration", + "macie2:GetBucketStatistics", + "macie2:GetClassificationExportConfiguration", + "macie2:GetClassificationScope", + "macie2:GetCustomDataIdentifier", + "macie2:GetFindings", + "macie2:GetFindingsFilter", + "macie2:GetFindingsPublicationConfiguration", + "macie2:GetFindingStatistics", + "macie2:GetInvitationsCount", + "macie2:GetMacieSession", + "macie2:GetMember", + "macie2:GetResourceProfile", + "macie2:GetRevealConfiguration", + "macie2:GetSensitiveDataOccurrencesAvailability", + "macie2:GetSensitivityInspectionTemplate", + "macie2:GetUsageStatistics", + "macie2:GetUsageTotals", + "macie2:ListAllowLists", + "macie2:ListAutomatedDiscoveryAccounts", + "macie2:ListClassificationJobs", + "macie2:ListClassificationScopes", + "macie2:ListCustomDataIdentifiers", + "macie2:ListFindings", + "macie2:ListFindingsFilters", + "macie2:ListInvitations", + "macie2:ListMembers", + "macie2:ListOrganizationAdminAccounts", + "macie2:ListResourceProfileArtifacts", + "macie2:ListResourceProfileDetections", + "macie2:ListSensitivityInspectionTemplates", + "macie2:ListTagsForResource", + "macie2:SearchResources", + "managedblockchain:GetMember", + "managedblockchain:GetNetwork", + "managedblockchain:GetNode", + "managedblockchain:GetProposal", + "managedblockchain:ListInvitations", + "managedblockchain:ListMembers", + "managedblockchain:ListNetworks", + "managedblockchain:ListNodes", + "managedblockchain:ListProposals", + "managedblockchain:ListProposalVotes", + "managedblockchain:ListTagsForResource", + "mediaconnect:DescribeFlow", + "mediaconnect:DescribeOffering", + "mediaconnect:DescribeReservation", + "mediaconnect:ListEntitlements", + "mediaconnect:ListFlows", + "mediaconnect:ListOfferings", + "mediaconnect:ListReservations", + "mediaconnect:ListTagsForResource", + "mediaconvert:DescribeEndpoints", + "mediaconvert:Get*", + "mediaconvert:List*", + "medialive:DescribeChannel", + "medialive:DescribeInput", + "medialive:DescribeInputDevice", + "medialive:DescribeInputDeviceThumbnail", + "medialive:DescribeInputSecurityGroup", + "medialive:DescribeMultiplex", + "medialive:DescribeMultiplexProgram", + "medialive:DescribeOffering", + "medialive:DescribeReservation", + "medialive:DescribeSchedule", + "medialive:GetCloudWatchAlarmTemplate", + "medialive:GetCloudWatchAlarmTemplateGroup", + "medialive:GetEventBridgeRuleTemplate", + "medialive:GetEventBridgeRuleTemplateGroup", + "medialive:GetSignalMap", + "medialive:ListChannels", + "medialive:ListCloudWatchAlarmTemplateGroups", + "medialive:ListCloudWatchAlarmTemplates", + "medialive:ListEventBridgeRuleTemplateGroups", + "medialive:ListEventBridgeRuleTemplates", + "medialive:ListInputDevices", + "medialive:ListInputDeviceTransfers", + "medialive:ListInputs", + "medialive:ListInputSecurityGroups", + "medialive:ListMultiplexes", + "medialive:ListMultiplexPrograms", + "medialive:ListOfferings", + "medialive:ListReservations", + "medialive:ListSignalMaps", + "medialive:ListTagsForResource", + "mediapackage-vod:Describe*", + "mediapackage-vod:List*", + "mediapackage:Describe*", + "mediapackage:List*", + "mediapackagev2:GetChannel", + "mediapackagev2:GetChannelGroup", + "mediapackagev2:GetChannelPolicy", + "mediapackagev2:GetHeadObject", + "mediapackagev2:GetObject", + "mediapackagev2:GetOriginEndpoint", + "mediapackagev2:GetOriginEndpointPolicy", + "mediapackagev2:ListChannelGroups", + "mediapackagev2:ListChannels", + "mediapackagev2:ListOriginEndpoints", + "mediapackagev2:ListTagsForResource", + "mediastore:DescribeContainer", + "mediastore:DescribeObject", + "mediastore:GetContainerPolicy", + "mediastore:GetCorsPolicy", + "mediastore:GetLifecyclePolicy", + "mediastore:GetMetricPolicy", + "mediastore:GetObject", + "mediastore:ListContainers", + "mediastore:ListItems", + "mediastore:ListTagsForResource", + "memorydb:DescribeClusters", + "memorydb:DescribeParameterGroups", + "memorydb:DescribeParameters", + "memorydb:ListTags", + "mgh:Describe*", + "mgh:GetHomeRegion", + "mgh:List*", + "mgn:DescribeJobLogItems", + "mgn:DescribeJobs", + "mgn:DescribeLaunchConfigurationTemplates", + "mgn:DescribeReplicationConfigurationTemplates", + "mgn:DescribeSourceServers", + "mgn:DescribeVcenterClients", + "mgn:GetLaunchConfiguration", + "mgn:GetReplicationConfiguration", + "mgn:ListApplications", + "mgn:ListSourceServerActions", + "mgn:ListTemplateActions", + "mgn:ListWaves", + "mobileanalytics:Get*", + "mobiletargeting:Get*", + "mobiletargeting:List*", + "monitron:GetProject", + "monitron:GetProjectAdminUser", + "monitron:ListProjects", + "monitron:ListTagsForResource", + "mq:Describe*", + "mq:List*", + "network-firewall:DescribeFirewall", + "network-firewall:DescribeFirewallPolicy", + "network-firewall:DescribeLoggingConfiguration", + "network-firewall:DescribeResourcePolicy", + "network-firewall:DescribeRuleGroup", + "network-firewall:DescribeRuleGroupMetadata", + "network-firewall:DescribeTLSInspectionConfiguration", + "network-firewall:ListFirewallPolicies", + "network-firewall:ListFirewalls", + "network-firewall:ListRuleGroups", + "network-firewall:ListTagsForResource", + "network-firewall:ListTLSInspectionConfigurations", + "networkmanager:DescribeGlobalNetworks", + "networkmanager:GetConnectAttachment", + "networkmanager:GetConnections", + "networkmanager:GetConnectPeer", + "networkmanager:GetConnectPeerAssociations", + "networkmanager:GetCoreNetwork", + "networkmanager:GetCoreNetworkChangeEvents", + "networkmanager:GetCoreNetworkChangeSet", + "networkmanager:GetCoreNetworkPolicy", + "networkmanager:GetCustomerGatewayAssociations", + "networkmanager:GetDevices", + "networkmanager:GetLinkAssociations", + "networkmanager:GetLinks", + "networkmanager:GetNetworkResourceCounts", + "networkmanager:GetNetworkResourceRelationships", + "networkmanager:GetNetworkResources", + "networkmanager:GetNetworkRoutes", + "networkmanager:GetNetworkTelemetry", + "networkmanager:GetResourcePolicy", + "networkmanager:GetRouteAnalysis", + "networkmanager:GetSites", + "networkmanager:GetSiteToSiteVpnAttachment", + "networkmanager:GetTransitGatewayConnectPeerAssociations", + "networkmanager:GetTransitGatewayPeering", + "networkmanager:GetTransitGatewayRegistrations", + "networkmanager:GetTransitGatewayRouteTableAttachment", + "networkmanager:GetVpcAttachment", + "networkmanager:ListAttachments", + "networkmanager:ListConnectPeers", + "networkmanager:ListCoreNetworkPolicyVersions", + "networkmanager:ListCoreNetworks", + "networkmanager:ListPeerings", + "networkmanager:ListTagsForResource", + "nimble:GetEula", + "nimble:GetFeatureMap", + "nimble:GetLaunchProfile", + "nimble:GetLaunchProfileDetails", + "nimble:GetLaunchProfileInitialization", + "nimble:GetLaunchProfileMember", + "nimble:GetStreamingImage", + "nimble:GetStreamingSession", + "nimble:GetStudio", + "nimble:GetStudioComponent", + "nimble:GetStudioMember", + "nimble:ListEulaAcceptances", + "nimble:ListEulas", + "nimble:ListLaunchProfileMembers", + "nimble:ListLaunchProfiles", + "nimble:ListStreamingImages", + "nimble:ListStreamingSessions", + "nimble:ListStudioComponents", + "nimble:ListStudioMembers", + "nimble:ListStudios", + "nimble:ListTagsForResource", + "notifications-contacts:GetEmailContact", + "notifications-contacts:ListEmailContacts", + "notifications-contacts:ListTagsForResource", + "notifications:GetEventRule", + "notifications:GetNotificationConfiguration", + "notifications:GetNotificationEvent", + "notifications:ListChannels", + "notifications:ListEventRules", + "notifications:ListNotificationConfigurations", + "notifications:ListNotificationEvents", + "notifications:ListNotificationHubs", + "notifications:ListTagsForResource", + "oam:GetLink", + "oam:GetSink", + "oam:GetSinkPolicy", + "oam:ListAttachedLinks", + "oam:ListLinks", + "oam:ListSinks", + "observabilityadmin:GetTelemetryEvaluationStatus", + "observabilityadmin:GetTelemetryEvaluationStatusForOrganization", + "observabilityadmin:ListResourceTelemetry", + "observabilityadmin:ListResourceTelemetryForOrganization", + "omics:Get*", + "omics:List*", + "one:GetDeviceConfigurationTemplate", + "one:GetDeviceInstance", + "one:GetDeviceInstanceConfiguration", + "one:GetSite", + "one:GetSiteAddress", + "one:ListDeviceConfigurationTemplates", + "one:ListDeviceInstances", + "one:ListSites", + "one:ListUsers", + "opsworks-cm:Describe*", + "opsworks-cm:List*", + "opsworks:Describe*", + "opsworks:Get*", + "organizations:Describe*", + "organizations:List*", + "osis:GetPipeline", + "osis:GetPipelineBlueprint", + "osis:GetPipelineChangeProgress", + "osis:ListPipelineBlueprints", + "osis:ListPipelines", + "osis:ListTagsForResource", + "outposts:Get*", + "outposts:List*", + "payment-cryptography:GetAlias", + "payment-cryptography:GetKey", + "payment-cryptography:GetPublicKeyCertificate", + "payment-cryptography:ListAliases", + "payment-cryptography:ListKeys", + "payment-cryptography:ListTagsForResource", + "payments:GetPaymentInstrument", + "payments:GetPaymentStatus", + "payments:ListPaymentInstruments", + "payments:ListPaymentPreferences", + "payments:ListPaymentProgramOptions", + "payments:ListPaymentProgramStatus", + "payments:ListTagsForResource", + "pca-connector-ad:GetConnector", + "pca-connector-ad:GetDirectoryRegistration", + "pca-connector-ad:GetServicePrincipalName", + "pca-connector-ad:GetTemplate", + "pca-connector-ad:GetTemplateGroupAccessControlEntry", + "pca-connector-ad:ListConnectors", + "pca-connector-ad:ListDirectoryRegistrations", + "pca-connector-ad:ListServicePrincipalNames", + "pca-connector-ad:ListTagsForResource", + "pca-connector-ad:ListTemplateGroupAccessControlEntries", + "pca-connector-ad:ListTemplates", + "pca-connector-scep:GetChallengeMetadata", + "pca-connector-scep:GetConnector", + "pca-connector-scep:ListChallengeMetadata", + "pca-connector-scep:ListConnectors", + "pca-connector-scep:ListTagsForResource", + "pcs:GetCluster", + "pcs:GetComputeNodeGroup", + "pcs:GetQueue", + "pcs:ListClusters", + "pcs:ListComputeNodeGroups", + "pcs:ListQueues", + "pcs:ListTagsForResource", + "personalize:Describe*", + "personalize:Get*", + "personalize:List*", + "pi:DescribeDimensionKeys", + "pi:GetDimensionKeyDetails", + "pi:GetResourceMetadata", + "pi:GetResourceMetrics", + "pi:ListAvailableResourceDimensions", + "pi:ListAvailableResourceMetrics", + "pipes:DescribePipe", + "pipes:ListPipes", + "pipes:ListTagsForResource", + "polly:Describe*", + "polly:Get*", + "polly:List*", + "polly:SynthesizeSpeech", + "pricing:DescribeServices", + "pricing:GetAttributeValues", + "pricing:GetPriceListFileUrl", + "pricing:GetProducts", + "pricing:ListPriceLists", + "proton:GetDeployment", + "proton:GetEnvironment", + "proton:GetEnvironmentTemplate", + "proton:GetEnvironmentTemplateVersion", + "proton:GetService", + "proton:GetServiceInstance", + "proton:GetServiceTemplate", + "proton:GetServiceTemplateVersion", + "proton:ListDeployments", + "proton:ListEnvironmentAccountConnections", + "proton:ListEnvironments", + "proton:ListEnvironmentTemplates", + "proton:ListServiceInstances", + "proton:ListServices", + "proton:ListServiceTemplates", + "proton:ListTagsForResource", + "purchase-orders:GetPurchaseOrder", + "purchase-orders:ListPurchaseOrderInvoices", + "purchase-orders:ListPurchaseOrders", + "purchase-orders:ViewPurchaseOrders", + "qbusiness:GetApplication", + "qbusiness:GetChatControlsConfiguration", + "qbusiness:GetDataSource", + "qbusiness:GetGroup", + "qbusiness:GetIndex", + "qbusiness:GetPlugin", + "qbusiness:GetRetriever", + "qbusiness:GetUser", + "qbusiness:GetWebExperience", + "qbusiness:ListApplications", + "qbusiness:ListDataSources", + "qbusiness:ListDataSourceSyncJobs", + "qbusiness:ListGroups", + "qbusiness:ListIndices", + "qbusiness:ListPlugins", + "qbusiness:ListRetrievers", + "qbusiness:ListSubscriptions", + "qbusiness:ListTagsForResource", + "qbusiness:ListWebExperiences", + "qldb:DescribeJournalKinesisStream", + "qldb:DescribeJournalS3Export", + "qldb:DescribeLedger", + "qldb:GetBlock", + "qldb:GetDigest", + "qldb:GetRevision", + "qldb:ListJournalKinesisStreamsForLedger", + "qldb:ListJournalS3Exports", + "qldb:ListJournalS3ExportsForLedger", + "qldb:ListLedgers", + "qldb:ListTagsForResource", + "ram:Get*", + "ram:List*", + "rbin:GetRule", + "rbin:ListRules", + "rbin:ListTagsForResource", + "rds:Describe*", + "rds:Download*", + "rds:List*", + "redshift-serverless:GetCustomDomainAssociation", + "redshift-serverless:GetEndpointAccess", + "redshift-serverless:GetNamespace", + "redshift-serverless:GetRecoveryPoint", + "redshift-serverless:GetResourcePolicy", + "redshift-serverless:GetScheduledAction", + "redshift-serverless:GetSnapshot", + "redshift-serverless:GetTableRestoreStatus", + "redshift-serverless:GetUsageLimit", + "redshift-serverless:GetWorkgroup", + "redshift-serverless:ListCustomDomainAssociations", + "redshift-serverless:ListEndpointAccess", + "redshift-serverless:ListNamespaces", + "redshift-serverless:ListRecoveryPoints", + "redshift-serverless:ListScheduledActions", + "redshift-serverless:ListSnapshotCopyConfigurations", + "redshift-serverless:ListSnapshots", + "redshift-serverless:ListTableRestoreStatus", + "redshift-serverless:ListTagsForResource", + "redshift-serverless:ListUsageLimits", + "redshift-serverless:ListWorkgroups", + "redshift:Describe*", + "redshift:GetReservedNodeExchangeOfferings", + "redshift:ListRecommendations", + "redshift:View*", + "refactor-spaces:GetApplication", + "refactor-spaces:GetEnvironment", + "refactor-spaces:GetResourcePolicy", + "refactor-spaces:GetRoute", + "refactor-spaces:GetService", + "refactor-spaces:ListApplications", + "refactor-spaces:ListEnvironments", + "refactor-spaces:ListEnvironmentVpcs", + "refactor-spaces:ListRoutes", + "refactor-spaces:ListServices", + "refactor-spaces:ListTagsForResource", + "rekognition:CompareFaces", + "rekognition:DescribeDataset", + "rekognition:DescribeProjects", + "rekognition:DescribeProjectVersions", + "rekognition:DescribeStreamProcessor", + "rekognition:Detect*", + "rekognition:GetCelebrityInfo", + "rekognition:GetCelebrityRecognition", + "rekognition:GetContentModeration", + "rekognition:GetFaceDetection", + "rekognition:GetFaceSearch", + "rekognition:GetLabelDetection", + "rekognition:GetPersonTracking", + "rekognition:GetSegmentDetection", + "rekognition:GetTextDetection", + "rekognition:List*", + "rekognition:RecognizeCelebrities", + "rekognition:Search*", + "resiliencehub:DescribeApp", + "resiliencehub:DescribeAppAssessment", + "resiliencehub:DescribeAppVersion", + "resiliencehub:DescribeAppVersionAppComponent", + "resiliencehub:DescribeAppVersionResource", + "resiliencehub:DescribeAppVersionResourcesResolutionStatus", + "resiliencehub:DescribeAppVersionTemplate", + "resiliencehub:DescribeDraftAppVersionResourcesImportStatus", + "resiliencehub:DescribeMetricsExport", + "resiliencehub:DescribeResiliencyPolicy", + "resiliencehub:DescribeResourceGroupingRecommendationTask", + "resiliencehub:ListAlarmRecommendations", + "resiliencehub:ListAppAssessmentComplianceDrifts", + "resiliencehub:ListAppAssessmentResourceDrifts", + "resiliencehub:ListAppAssessments", + "resiliencehub:ListAppComponentCompliances", + "resiliencehub:ListAppComponentRecommendations", + "resiliencehub:ListAppInputSources", + "resiliencehub:ListApps", + "resiliencehub:ListAppVersionAppComponents", + "resiliencehub:ListAppVersionResourceMappings", + "resiliencehub:ListAppVersionResources", + "resiliencehub:ListAppVersions", + "resiliencehub:ListMetrics", + "resiliencehub:ListRecommendationTemplates", + "resiliencehub:ListResiliencyPolicies", + "resiliencehub:ListResourceGroupingRecommendations", + "resiliencehub:ListSopRecommendations", + "resiliencehub:ListSuggestedResiliencyPolicies", + "resiliencehub:ListTagsForResource", + "resiliencehub:ListTestRecommendations", + "resiliencehub:ListUnsupportedAppVersionResources", + "resource-explorer-2:BatchGetView", + "resource-explorer-2:GetDefaultView", + "resource-explorer-2:GetIndex", + "resource-explorer-2:GetView", + "resource-explorer-2:ListIndexes", + "resource-explorer-2:ListSupportedResourceTypes", + "resource-explorer-2:ListTagsForResource", + "resource-explorer-2:ListViews", + "resource-explorer-2:Search", + "resource-groups:Get*", + "resource-groups:List*", + "resource-groups:Search*", + "robomaker:BatchDescribe*", + "robomaker:Describe*", + "robomaker:Get*", + "robomaker:List*", + "route53-recovery-cluster:Get*", + "route53-recovery-cluster:ListRoutingControls", + "route53-recovery-control-config:Describe*", + "route53-recovery-control-config:GetResourcePolicy", + "route53-recovery-control-config:List*", + "route53-recovery-readiness:Get*", + "route53-recovery-readiness:List*", + "route53:Get*", + "route53:List*", + "route53:Test*", + "route53domains:Check*", + "route53domains:Get*", + "route53domains:List*", + "route53domains:View*", + "route53profiles:GetProfile", + "route53profiles:GetProfileAssociation", + "route53profiles:GetProfileResourceAssociation", + "route53profiles:ListProfileAssociations", + "route53profiles:ListProfileResourceAssociations", + "route53profiles:ListProfiles", + "route53profiles:ListTagsForResource", + "route53resolver:Get*", + "route53resolver:List*", + "rum:GetAppMonitor", + "rum:GetAppMonitorData", + "rum:ListAppMonitors", + "s3-object-lambda:GetObject", + "s3-object-lambda:GetObjectAcl", + "s3-object-lambda:GetObjectLegalHold", + "s3-object-lambda:GetObjectRetention", + "s3-object-lambda:GetObjectTagging", + "s3-object-lambda:GetObjectVersion", + "s3-object-lambda:GetObjectVersionAcl", + "s3-object-lambda:GetObjectVersionTagging", + "s3-object-lambda:ListBucket", + "s3-object-lambda:ListBucketMultipartUploads", + "s3-object-lambda:ListBucketVersions", + "s3-object-lambda:ListMultipartUploadParts", + "s3-outposts:GetAccessPoint", + "s3-outposts:GetAccessPointPolicy", + "s3-outposts:GetBucket", + "s3-outposts:GetBucketPolicy", + "s3-outposts:GetBucketTagging", + "s3-outposts:GetBucketVersioning", + "s3-outposts:GetLifecycleConfiguration", + "s3-outposts:GetObject", + "s3-outposts:GetObjectTagging", + "s3-outposts:GetObjectVersion", + "s3-outposts:GetObjectVersionForReplication", + "s3-outposts:GetObjectVersionTagging", + "s3-outposts:GetReplicationConfiguration", + "s3-outposts:ListAccessPoints", + "s3-outposts:ListBucket", + "s3-outposts:ListBucketMultipartUploads", + "s3-outposts:ListBucketVersions", + "s3-outposts:ListEndpoints", + "s3-outposts:ListMultipartUploadParts", + "s3-outposts:ListOutpostsWithS3", + "s3-outposts:ListRegionalBuckets", + "s3-outposts:ListSharedEndpoints", + "s3:DescribeJob", + "s3:Get*", + "s3:List*", + "sagemaker-groundtruth-synthetic:GetAccountDetails", + "sagemaker-groundtruth-synthetic:GetBatch", + "sagemaker-groundtruth-synthetic:GetProject", + "sagemaker-groundtruth-synthetic:ListBatchDataTransfers", + "sagemaker-groundtruth-synthetic:ListBatchSummaries", + "sagemaker-groundtruth-synthetic:ListProjectDataTransfers", + "sagemaker-groundtruth-synthetic:ListProjectSummaries", + "sagemaker:Describe*", + "sagemaker:GetSearchSuggestions", + "sagemaker:List*", + "sagemaker:Search", + "savingsplans:DescribeSavingsPlanRates", + "savingsplans:DescribeSavingsPlans", + "savingsplans:DescribeSavingsPlansOfferingRates", + "savingsplans:DescribeSavingsPlansOfferings", + "savingsplans:ListTagsForResource", + "scheduler:GetSchedule", + "scheduler:GetScheduleGroup", + "scheduler:ListScheduleGroups", + "scheduler:ListSchedules", + "scheduler:ListTagsForResource", + "schemas:Describe*", + "schemas:Get*", + "schemas:List*", + "schemas:Search*", + "sdb:Get*", + "sdb:List*", + "sdb:Select*", + "secretsmanager:Describe*", + "secretsmanager:GetResourcePolicy", + "secretsmanager:List*", + "securityhub:BatchGetAutomationRules", + "securityhub:BatchGetConfigurationPolicyAssociations", + "securityhub:BatchGetControlEvaluations", + "securityhub:BatchGetSecurityControls", + "securityhub:BatchGetStandardsControlAssociations", + "securityhub:Describe*", + "securityhub:Get*", + "securityhub:List*", + "securitylake:GetDataLakeExceptionSubscription", + "securitylake:GetDataLakeOrganizationConfiguration", + "securitylake:GetDataLakeSources", + "securitylake:GetSubscriber", + "securitylake:ListDataLakeExceptions", + "securitylake:ListDataLakes", + "securitylake:ListLogSources", + "securitylake:ListSubscribers", + "securitylake:ListTagsForResource", + "serverlessrepo:Get*", + "serverlessrepo:List*", + "serverlessrepo:SearchApplications", + "servicecatalog:Describe*", + "servicecatalog:GetApplication", + "servicecatalog:GetAttributeGroup", + "servicecatalog:List*", + "servicecatalog:Scan*", + "servicecatalog:Search*", + "servicediscovery:DiscoverInstances", + "servicediscovery:DiscoverInstancesRevision", + "servicediscovery:Get*", + "servicediscovery:List*", + "servicequotas:GetAssociationForServiceQuotaTemplate", + "servicequotas:GetAWSDefaultServiceQuota", + "servicequotas:GetRequestedServiceQuotaChange", + "servicequotas:GetServiceQuota", + "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", + "servicequotas:ListAWSDefaultServiceQuotas", + "servicequotas:ListRequestedServiceQuotaChangeHistory", + "servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota", + "servicequotas:ListServiceQuotaIncreaseRequestsInTemplate", + "servicequotas:ListServiceQuotas", + "servicequotas:ListServices", + "ses:BatchGetMetricData", + "ses:Describe*", + "ses:Get*", + "ses:List*", + "shield:Describe*", + "shield:Get*", + "shield:List*", + "signer:DescribeSigningJob", + "signer:GetSigningPlatform", + "signer:GetSigningProfile", + "signer:ListProfilePermissions", + "signer:ListSigningJobs", + "signer:ListSigningPlatforms", + "signer:ListSigningProfiles", + "signer:ListTagsForResource", + "signin:ListTrustedIdentityPropagationApplicationsForConsole", + "sms-voice:DescribeAccountAttributes", + "sms-voice:DescribeAccountLimits", + "sms-voice:DescribeConfigurationSets", + "sms-voice:DescribeKeywords", + "sms-voice:DescribeOptedOutNumbers", + "sms-voice:DescribeOptOutLists", + "sms-voice:DescribePhoneNumbers", + "sms-voice:DescribePools", + "sms-voice:DescribeSenderIds", + "sms-voice:DescribeSpendLimits", + "sms-voice:ListPoolOriginationIdentities", + "sms-voice:ListTagsForResource", + "snowball:Describe*", + "snowball:Get*", + "snowball:List*", + "sns:Check*", + "sns:Get*", + "sns:List*", + "sqs:Get*", + "sqs:List*", + "sqs:Receive*", + "ssm-contacts:DescribeEngagement", + "ssm-contacts:DescribePage", + "ssm-contacts:GetContact", + "ssm-contacts:GetContactChannel", + "ssm-contacts:ListContactChannels", + "ssm-contacts:ListContacts", + "ssm-contacts:ListEngagements", + "ssm-contacts:ListPageReceipts", + "ssm-contacts:ListPagesByContact", + "ssm-contacts:ListPagesByEngagement", + "ssm-incidents:GetIncidentRecord", + "ssm-incidents:GetReplicationSet", + "ssm-incidents:GetResourcePolicies", + "ssm-incidents:GetResponsePlan", + "ssm-incidents:GetTimelineEvent", + "ssm-incidents:ListIncidentRecords", + "ssm-incidents:ListRelatedItems", + "ssm-incidents:ListReplicationSets", + "ssm-incidents:ListResponsePlans", + "ssm-incidents:ListTagsForResource", + "ssm-incidents:ListTimelineEvents", + "ssm-sap:GetApplication", + "ssm-sap:GetComponent", + "ssm-sap:GetDatabase", + "ssm-sap:GetOperation", + "ssm-sap:GetResourcePermission", + "ssm-sap:ListApplications", + "ssm-sap:ListComponents", + "ssm-sap:ListDatabases", + "ssm-sap:ListOperationEvents", + "ssm-sap:ListOperations", + "ssm-sap:ListTagsForResource", + "ssm:Describe*", + "ssm:Get*", + "ssm:List*", + "sso-directory:Describe*", + "sso-directory:List*", + "sso-directory:Search*", + "sso:Describe*", + "sso:Get*", + "sso:List*", + "sso:Search*", + "states:Describe*", + "states:GetExecutionHistory", + "states:List*", + "states:ValidateStateMachineDefinition", + "storagegateway:Describe*", + "storagegateway:List*", + "sts:GetAccessKeyInfo", + "sts:GetCallerIdentity", + "sts:GetSessionToken", + "support:DescribeAttachment", + "support:DescribeCases", + "support:DescribeCommunications", + "support:DescribeServices", + "support:DescribeSeverityLevels", + "support:DescribeTrustedAdvisorCheckRefreshStatuses", + "support:DescribeTrustedAdvisorCheckResult", + "support:DescribeTrustedAdvisorChecks", + "support:DescribeTrustedAdvisorCheckSummaries", + "supportplans:GetSupportPlan", + "supportplans:GetSupportPlanUpdateStatus", + "supportplans:ListSupportPlanModifiers", + "sustainability:GetCarbonFootprintSummary", + "swf:Count*", + "swf:Describe*", + "swf:Get*", + "swf:List*", + "synthetics:Describe*", + "synthetics:Get*", + "synthetics:List*", + "tag:DescribeReportCreation", + "tag:Get*", + "tax:GetExemptions", + "tax:GetTaxInheritance", + "tax:GetTaxInterview", + "tax:GetTaxRegistration", + "tax:GetTaxRegistrationDocument", + "tax:ListTaxRegistrations", + "timestream:DescribeBatchLoadTask", + "timestream:DescribeDatabase", + "timestream:DescribeEndpoints", + "timestream:DescribeTable", + "timestream:ListBatchLoadTasks", + "timestream:ListDatabases", + "timestream:ListMeasures", + "timestream:ListTables", + "timestream:ListTagsForResource", + "tnb:GetSolFunctionInstance", + "tnb:GetSolFunctionPackage", + "tnb:GetSolFunctionPackageContent", + "tnb:GetSolFunctionPackageDescriptor", + "tnb:GetSolNetworkInstance", + "tnb:GetSolNetworkOperation", + "tnb:GetSolNetworkPackage", + "tnb:GetSolNetworkPackageContent", + "tnb:GetSolNetworkPackageDescriptor", + "tnb:ListSolFunctionInstances", + "tnb:ListSolFunctionPackages", + "tnb:ListSolNetworkInstances", + "tnb:ListSolNetworkOperations", + "tnb:ListSolNetworkPackages", + "tnb:ListTagsForResource", + "transcribe:Get*", + "transcribe:List*", + "transfer:Describe*", + "transfer:List*", + "transfer:TestIdentityProvider", + "translate:DescribeTextTranslationJob", + "translate:GetParallelData", + "translate:GetTerminology", + "translate:ListParallelData", + "translate:ListTerminologies", + "translate:ListTextTranslationJobs", + "trustedadvisor:Describe*", + "trustedadvisor:GetOrganizationRecommendation", + "trustedadvisor:GetRecommendation", + "trustedadvisor:ListChecks", + "trustedadvisor:ListOrganizationRecommendationAccounts", + "trustedadvisor:ListOrganizationRecommendationResources", + "trustedadvisor:ListOrganizationRecommendations", + "trustedadvisor:ListRecommendationResources", + "trustedadvisor:ListRecommendations", + "user-subscriptions:ListApplicationClaims", + "user-subscriptions:ListClaims", + "user-subscriptions:ListUserSubscriptions", + "verifiedpermissions:GetIdentitySource", + "verifiedpermissions:GetPolicy", + "verifiedpermissions:GetPolicyStore", + "verifiedpermissions:GetPolicyTemplate", + "verifiedpermissions:GetSchema", + "verifiedpermissions:IsAuthorized", + "verifiedpermissions:IsAuthorizedWithToken", + "verifiedpermissions:ListIdentitySources", + "verifiedpermissions:ListPolicies", + "verifiedpermissions:ListPolicyStores", + "verifiedpermissions:ListPolicyTemplates", + "vpc-lattice:GetAccessLogSubscription", + "vpc-lattice:GetAuthPolicy", + "vpc-lattice:GetListener", + "vpc-lattice:GetResourcePolicy", + "vpc-lattice:GetRule", + "vpc-lattice:GetService", + "vpc-lattice:GetServiceNetwork", + "vpc-lattice:GetServiceNetworkServiceAssociation", + "vpc-lattice:GetServiceNetworkVpcAssociation", + "vpc-lattice:GetTargetGroup", + "vpc-lattice:ListAccessLogSubscriptions", + "vpc-lattice:ListListeners", + "vpc-lattice:ListRules", + "vpc-lattice:ListServiceNetworks", + "vpc-lattice:ListServiceNetworkServiceAssociations", + "vpc-lattice:ListServiceNetworkVpcAssociations", + "vpc-lattice:ListServices", + "vpc-lattice:ListTagsForResource", + "vpc-lattice:ListTargetGroups", + "vpc-lattice:ListTargets", + "waf-regional:Get*", + "waf-regional:List*", + "waf:Get*", + "waf:List*", + "wafv2:CheckCapacity", + "wafv2:Describe*", + "wafv2:Get*", + "wafv2:List*", + "wellarchitected:ExportLens", + "wellarchitected:GetAnswer", + "wellarchitected:GetConsolidatedReport", + "wellarchitected:GetLens", + "wellarchitected:GetLensReview", + "wellarchitected:GetLensReviewReport", + "wellarchitected:GetLensVersionDifference", + "wellarchitected:GetMilestone", + "wellarchitected:GetProfile", + "wellarchitected:GetProfileTemplate", + "wellarchitected:GetReviewTemplate", + "wellarchitected:GetReviewTemplateAnswer", + "wellarchitected:GetReviewTemplateLensReview", + "wellarchitected:GetWorkload", + "wellarchitected:ListAnswers", + "wellarchitected:ListCheckDetails", + "wellarchitected:ListCheckSummaries", + "wellarchitected:ListLenses", + "wellarchitected:ListLensReviewImprovements", + "wellarchitected:ListLensReviews", + "wellarchitected:ListLensShares", + "wellarchitected:ListMilestones", + "wellarchitected:ListNotifications", + "wellarchitected:ListProfileNotifications", + "wellarchitected:ListProfiles", + "wellarchitected:ListProfileShares", + "wellarchitected:ListReviewTemplateAnswers", + "wellarchitected:ListReviewTemplates", + "wellarchitected:ListShareInvitations", + "wellarchitected:ListTagsForResource", + "wellarchitected:ListTemplateShares", + "wellarchitected:ListWorkloads", + "wellarchitected:ListWorkloadShares", + "workdocs:CheckAlias", + "workdocs:Describe*", + "workdocs:Get*", + "workmail:Describe*", + "workmail:Get*", + "workmail:List*", + "workmail:Search*", + "workspaces-web:GetBrowserSettings", + "workspaces-web:GetIdentityProvider", + "workspaces-web:GetNetworkSettings", + "workspaces-web:GetPortal", + "workspaces-web:GetPortalServiceProviderMetadata", + "workspaces-web:GetTrustStore", + "workspaces-web:GetUserAccessLoggingSettings", + "workspaces-web:GetUserSettings", + "workspaces-web:ListBrowserSettings", + "workspaces-web:ListIdentityProviders", + "workspaces-web:ListNetworkSettings", + "workspaces-web:ListPortals", + "workspaces-web:ListTagsForResource", + "workspaces-web:ListTrustStores", + "workspaces-web:ListUserAccessLoggingSettings", + "workspaces-web:ListUserSettings", + "workspaces:Describe*", + "xray:BatchGet*", + "xray:Get*" + ], + "Resource": "*" + } + ] +} \ No newline at end of file diff --git a/data/json/SecurityAudit/v48/policy.json b/data/json/SecurityAudit/v48/policy.json new file mode 100644 index 00000000..b8030fa7 --- /dev/null +++ b/data/json/SecurityAudit/v48/policy.json @@ -0,0 +1,817 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "BaseSecurityAuditStatement", + "Effect": "Allow", + "Action": [ + "a4b:ListSkills", + "access-analyzer:GetAnalyzedResource", + "access-analyzer:GetAnalyzer", + "access-analyzer:GetArchiveRule", + "access-analyzer:GetFinding", + "access-analyzer:ListAnalyzedResources", + "access-analyzer:ListAnalyzers", + "access-analyzer:ListArchiveRules", + "access-analyzer:ListFindings", + "access-analyzer:ListTagsForResource", + "account:GetAlternateContact", + "account:GetPrimaryEmail", + "account:GetRegionOptStatus", + "acm-pca:DescribeCertificateAuthority", + "acm-pca:DescribeCertificateAuthorityAuditReport", + "acm-pca:GetPolicy", + "acm-pca:ListCertificateAuthorities", + "acm-pca:ListPermissions", + "acm-pca:ListTags", + "acm:Describe*", + "acm:List*", + "airflow:GetEnvironment", + "airflow:ListEnvironments", + "appflow:ListFlows", + "appflow:ListTagsForResource", + "application-autoscaling:Describe*", + "appmesh:Describe*", + "appmesh:List*", + "apprunner:DescribeAutoScalingConfiguration", + "apprunner:DescribeCustomDomains", + "apprunner:DescribeObservabilityConfiguration", + "apprunner:DescribeService", + "apprunner:DescribeVpcConnector", + "apprunner:DescribeVpcIngressConnection", + "apprunner:ListAutoScalingConfigurations", + "apprunner:ListConnections", + "apprunner:ListObservabilityConfigurations", + "apprunner:ListOperations", + "apprunner:ListServices", + "apprunner:ListTagsForResource", + "apprunner:ListVpcConnectors", + "apprunner:ListVpcIngressConnections", + "appsync:GetApiCache", + "appsync:List*", + "athena:GetWorkGroup", + "athena:List*", + "auditmanager:GetAccountStatus", + "auditmanager:ListAssessmentControlInsightsByControlDomain", + "auditmanager:ListAssessmentFrameworks", + "auditmanager:ListAssessmentFrameworkShareRequests", + "auditmanager:ListAssessmentReports", + "auditmanager:ListAssessments", + "auditmanager:ListControlDomainInsights", + "auditmanager:ListControlDomainInsightsByAssessment", + "auditmanager:ListControlInsightsByControlDomain", + "auditmanager:ListControls", + "auditmanager:ListNotifications", + "auditmanager:ListTagsForResource", + "autoscaling-plans:DescribeScalingPlans", + "autoscaling:Describe*", + "backup:DescribeGlobalSettings", + "backup:DescribeRegionSettings", + "backup:GetBackupVaultAccessPolicy", + "backup:GetBackupVaultNotifications", + "backup:ListBackupVaults", + "backup:ListTags", + "batch:DescribeComputeEnvironments", + "batch:DescribeJobDefinitions", + "bedrock:GetCustomModel", + "bedrock:GetModelInvocationLoggingConfiguration", + "bedrock:ListCustomModels", + "bedrock:ListTagsForResource", + "braket:SearchJobs", + "braket:SearchQuantumTasks", + "chime:List*", + "cleanrooms:BatchGetCollaborationAnalysisTemplate", + "cleanrooms:BatchGetSchema", + "cleanrooms:BatchGetSchemaAnalysisRule", + "cleanrooms:GetAnalysisTemplate", + "cleanrooms:GetCollaboration", + "cleanrooms:GetCollaborationAnalysisTemplate", + "cleanrooms:GetCollaborationConfiguredAudienceModelAssociation", + "cleanrooms:GetCollaborationIdNamespaceAssociation", + "cleanrooms:GetCollaborationPrivacyBudgetTemplate", + "cleanrooms:GetConfiguredAudienceModelAssociation", + "cleanrooms:GetConfiguredTable", + "cleanrooms:GetConfiguredTableAnalysisRule", + "cleanrooms:GetConfiguredTableAssociation", + "cleanrooms:GetConfiguredTableAssociationAnalysisRule", + "cleanrooms:GetIdMappingTable", + "cleanrooms:GetIdNamespaceAssociation", + "cleanrooms:GetMembership", + "cleanrooms:GetPrivacyBudgetTemplate", + "cleanrooms:GetProtectedQuery", + "cleanrooms:GetSchema", + "cleanrooms:GetSchemaAnalysisRule", + "cleanrooms:ListAnalysisTemplates", + "cleanrooms:ListCollaborationAnalysisTemplates", + "cleanrooms:ListCollaborationConfiguredAudienceModelAssociations", + "cleanrooms:ListCollaborationIdNamespaceAssociations", + "cleanrooms:ListCollaborationPrivacyBudgetTemplates", + "cleanrooms:ListCollaborationPrivacyBudgets", + "cleanrooms:ListCollaborations", + "cleanrooms:ListConfiguredAudienceModelAssociations", + "cleanrooms:ListConfiguredTableAssociations", + "cleanrooms:ListConfiguredTables", + "cleanrooms:ListIdMappingTables", + "cleanrooms:ListIdNamespaceAssociations", + "cleanrooms:ListMembers", + "cleanrooms:ListMemberships", + "cleanrooms:ListPrivacyBudgetTemplates", + "cleanrooms:ListPrivacyBudgets", + "cleanrooms:ListProtectedQueries", + "cleanrooms:ListSchemas", + "cleanrooms:ListTagsForResource", + "cleanrooms:PreviewPrivacyImpact", + "cloud9:Describe*", + "cloud9:ListEnvironments", + "clouddirectory:ListDirectories", + "cloudformation:DescribeStack*", + "cloudformation:GetStackPolicy", + "cloudformation:GetTemplate", + "cloudformation:ListStack*", + "cloudfront:Get*", + "cloudfront:List*", + "cloudsearch:DescribeDomainEndpointOptions", + "cloudsearch:DescribeDomains", + "cloudsearch:DescribeServiceAccessPolicies", + "cloudtrail:DescribeTrails", + "cloudtrail:GetEventSelectors", + "cloudtrail:GetInsightSelectors", + "cloudtrail:GetTrail", + "cloudtrail:GetTrailStatus", + "cloudtrail:ListTags", + "cloudtrail:ListTrails", + "cloudtrail:LookupEvents", + "cloudwatch:Describe*", + "cloudwatch:GetDashboard", + "cloudwatch:ListDashboards", + "cloudwatch:ListTagsForResource", + "codeartifact:GetDomainPermissionsPolicy", + "codeartifact:GetRepositoryPermissionsPolicy", + "codeartifact:ListRepositories", + "codebuild:BatchGetProjects", + "codebuild:GetResourcePolicy", + "codebuild:ListProjects", + "codebuild:ListSourceCredentials", + "codecommit:BatchGetRepositories", + "codecommit:GetBranch", + "codecommit:GetObjectIdentifier", + "codecommit:GetRepository", + "codecommit:GetRepositoryTriggers", + "codecommit:List*", + "codedeploy:Batch*", + "codedeploy:Get*", + "codedeploy:List*", + "codepipeline:GetJobDetails", + "codepipeline:GetPipeline", + "codepipeline:GetPipelineExecution", + "codepipeline:GetPipelineState", + "codepipeline:ListPipelines", + "codestar:Describe*", + "codestar:List*", + "cognito-identity:Describe*", + "cognito-identity:GetIdentityPoolRoles", + "cognito-identity:ListIdentityPools", + "cognito-identity:ListTagsForResource", + "cognito-idp:Describe*", + "cognito-idp:ListDevices", + "cognito-idp:ListGroups", + "cognito-idp:ListIdentityProviders", + "cognito-idp:ListResourceServers", + "cognito-idp:ListTagsForResource", + "cognito-idp:ListUserImportJobs", + "cognito-idp:ListUserPoolClients", + "cognito-idp:ListUserPools", + "cognito-idp:ListUsers", + "cognito-idp:ListUsersInGroup", + "cognito-sync:Describe*", + "cognito-sync:List*", + "comprehend:Describe*", + "comprehend:List*", + "comprehendmedical:ListICD10CMInferenceJobs", + "comprehendmedical:ListPHIDetectionJobs", + "comprehendmedical:ListRxNormInferenceJobs", + "comprehendmedical:ListSNOMEDCTInferenceJobs", + "config:BatchGetAggregateResourceConfig", + "config:BatchGetResourceConfig", + "config:Deliver*", + "config:Describe*", + "config:Get*", + "config:List*", + "config:SelectAggregateResourceConfig", + "config:SelectResourceConfig", + "connect:ListApprovedOrigins", + "connect:ListInstanceAttributes", + "connect:ListInstances", + "connect:ListInstanceStorageConfigs", + "connect:ListIntegrationAssociations", + "connect:ListLambdaFunctions", + "connect:ListLexBots", + "connect:ListSecurityKeys", + "databrew:DescribeDataset", + "databrew:DescribeProject", + "databrew:ListJobs", + "databrew:ListProjects", + "dataexchange:ListDataSets", + "datapipeline:DescribeObjects", + "datapipeline:DescribePipelines", + "datapipeline:EvaluateExpression", + "datapipeline:GetPipelineDefinition", + "datapipeline:ListPipelines", + "datapipeline:QueryObjects", + "datapipeline:ValidatePipelineDefinition", + "datasync:Describe*", + "datasync:List*", + "dax:Describe*", + "dax:ListTags", + "deepracer:ListModels", + "detective:GetGraphIngestState", + "detective:ListGraphs", + "detective:ListMembers", + "devicefarm:ListProjects", + "directconnect:Describe*", + "discovery:DescribeAgents", + "discovery:DescribeConfigurations", + "discovery:DescribeContinuousExports", + "discovery:DescribeExportConfigurations", + "discovery:DescribeExportTasks", + "discovery:DescribeImportTasks", + "dms:Describe*", + "dms:ListTagsForResource", + "docdb-elastic:ListClusters", + "ds:DescribeDirectories", + "dynamodb:DescribeContinuousBackups", + "dynamodb:DescribeExport", + "dynamodb:DescribeGlobalTable", + "dynamodb:DescribeKinesisStreamingDestination", + "dynamodb:DescribeTable", + "dynamodb:DescribeTimeToLive", + "dynamodb:ListBackups", + "dynamodb:ListExports", + "dynamodb:ListGlobalTables", + "dynamodb:ListStreams", + "dynamodb:ListTables", + "dynamodb:ListTagsOfResource", + "ec2:Describe*", + "ec2:GetEbsEncryptionByDefault", + "ec2:GetImageBlockPublicAccessState", + "ec2:GetManagedPrefixListAssociations", + "ec2:GetManagedPrefixListEntries", + "ec2:GetNetworkInsightsAccessScopeAnalysisFindings", + "ec2:GetNetworkInsightsAccessScopeContent", + "ec2:GetTransitGatewayAttachmentPropagations", + "ec2:GetTransitGatewayMulticastDomainAssociations", + "ec2:GetTransitGatewayPrefixListReferences", + "ec2:GetTransitGatewayRouteTableAssociations", + "ec2:GetTransitGatewayRouteTablePropagations", + "ec2:SearchTransitGatewayRoutes", + "ecr-public:DescribeImages", + "ecr-public:DescribeImageTags", + "ecr-public:DescribeRegistries", + "ecr-public:DescribeRepositories", + "ecr-public:GetRegistryCatalogData", + "ecr-public:GetRepositoryCatalogData", + "ecr-public:GetRepositoryPolicy", + "ecr-public:ListTagsForResource", + "ecr:BatchGetRepositoryScanningConfiguration", + "ecr:DescribeImages", + "ecr:DescribeImageScanFindings", + "ecr:DescribeRegistry", + "ecr:DescribeRepositories", + "ecr:GetLifecyclePolicy", + "ecr:GetRegistryPolicy", + "ecr:GetRegistryScanningConfiguration", + "ecr:GetRepositoryPolicy", + "ecr:ListImages", + "ecr:ListTagsForResource", + "ecs:Describe*", + "ecs:List*", + "eks:DescribeCluster", + "eks:DescribeFargateProfile", + "eks:DescribeNodeGroup", + "eks:ListClusters", + "eks:ListFargateProfiles", + "eks:ListNodeGroups", + "eks:ListTagsForResource", + "eks:ListUpdates", + "elastic-inference:DescribeAccelerators", + "elasticache:Describe*", + "elasticache:ListTagsForResource", + "elasticbeanstalk:Describe*", + "elasticbeanstalk:ListTagsForResource", + "elasticfilesystem:DescribeAccessPoints", + "elasticfilesystem:DescribeAccountPreferences", + "elasticfilesystem:DescribeBackupPolicy", + "elasticfilesystem:DescribeFileSystemPolicy", + "elasticfilesystem:DescribeFileSystems", + "elasticfilesystem:DescribeLifecycleConfiguration", + "elasticfilesystem:DescribeMountTargets", + "elasticfilesystem:DescribeMountTargetSecurityGroups", + "elasticfilesystem:DescribeReplicationConfigurations", + "elasticfilesystem:DescribeTags", + "elasticloadbalancing:Describe*", + "elasticmapreduce:Describe*", + "elasticmapreduce:GetAutoTerminationPolicy", + "elasticmapreduce:GetBlockPublicAccessConfiguration", + "elasticmapreduce:GetManagedScalingPolicy", + "elasticmapreduce:ListClusters", + "elasticmapreduce:ListInstances", + "elasticmapreduce:ListSecurityConfigurations", + "elastictranscoder:ListPipelines", + "emr-serverless:GetApplication", + "emr-serverless:ListApplications", + "emr-serverless:ListJobRuns", + "entityresolution:GetIdNamespace", + "es:Describe*", + "es:GetCompatibleVersions", + "es:ListDomainNames", + "es:ListElasticsearchInstanceTypeDetails", + "es:ListElasticsearchVersions", + "es:ListTags", + "events:Describe*", + "events:List*", + "events:TestEventPattern", + "finspace:ListEnvironments", + "finspace:ListKxEnvironments", + "firehose:Describe*", + "firehose:List*", + "fms:ListComplianceStatus", + "fms:ListPolicies", + "forecast:ListDatasets", + "frauddetector:GetDetectors", + "fsx:Describe*", + "fsx:List*", + "gamelift:ListBuilds", + "gamelift:ListFleets", + "geo:ListMaps", + "glacier:DescribeVault", + "glacier:GetDataRetrievalPolicy", + "glacier:GetVaultAccessPolicy", + "glacier:GetVaultLock", + "glacier:ListVaults", + "globalaccelerator:Describe*", + "globalaccelerator:List*", + "glue:GetCrawlers", + "glue:GetDatabases", + "glue:GetDataCatalogEncryptionSettings", + "glue:GetDevEndpoints", + "glue:GetJobs", + "glue:GetResourcePolicy", + "glue:GetSecurityConfiguration", + "glue:GetSecurityConfigurations", + "glue:GetTags", + "grafana:ListWorkspaces", + "greengrass:List*", + "guardduty:DescribePublishingDestination", + "guardduty:Get*", + "guardduty:List*", + "health:DescribeAffectedAccountsForOrganization", + "health:DescribeAffectedEntities", + "health:DescribeAffectedEntitiesForOrganization", + "health:DescribeEntityAggregates", + "health:DescribeEventAggregates", + "health:DescribeEventDetails", + "health:DescribeEventDetailsForOrganization", + "health:DescribeEvents", + "health:DescribeEventsForOrganization", + "health:DescribeEventTypes", + "health:DescribeHealthServiceStatusForOrganization", + "healthlake:ListFHIRDatastores", + "honeycode:ListTables", + "iam:GenerateCredentialReport", + "iam:GenerateServiceLastAccessedDetails", + "iam:Get*", + "iam:List*", + "iam:SimulateCustomPolicy", + "iam:SimulatePrincipalPolicy", + "identitystore:ListGroupMemberships", + "identitystore:ListGroupMembershipsForMember", + "identitystore:ListGroups", + "identitystore:ListUsers", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", + "inspector2:BatchGetAccountStatus", + "inspector2:BatchGetFreeTrialInfo", + "inspector2:DescribeOrganizationConfiguration", + "inspector2:GetConfiguration", + "inspector2:GetDelegatedAdminAccount", + "inspector2:GetFindingsReportStatus", + "inspector2:GetMember", + "inspector2:ListAccountPermissions", + "inspector2:ListCoverage", + "inspector2:ListCoverageStatistics", + "inspector2:ListDelegatedAdminAccounts", + "inspector2:ListFilters", + "inspector2:ListFindingAggregations", + "inspector2:ListFindings", + "inspector2:ListTagsForResource", + "inspector2:ListUsageTotals", + "iot:Describe*", + "iot:GetPolicy", + "iot:GetPolicyVersion", + "iot:List*", + "iotanalytics:ListChannels", + "iotevents:ListInputs", + "iotfleetwise:ListModelManifests", + "iotsitewise:DescribeGatewayCapabilityConfiguration", + "iotsitewise:ListAssetModels", + "iotsitewise:ListGateways", + "iottwinmaker:ListWorkspaces", + "kafka-cluster:Describe*", + "kafka:Describe*", + "kafka:GetBootstrapBrokers", + "kafka:GetCompatibleKafkaVersions", + "kafka:List*", + "kafkaconnect:Describe*", + "kafkaconnect:List*", + "kendra:DescribeIndex", + "kendra:ListDataSources", + "kendra:ListIndices", + "kendra:ListTagsForResource", + "kinesis:DescribeLimits", + "kinesis:DescribeStream", + "kinesis:DescribeStreamConsumer", + "kinesis:DescribeStreamSummary", + "kinesis:ListShards", + "kinesis:ListStreamConsumers", + "kinesis:ListStreams", + "kinesis:ListTagsForStream", + "kinesisanalytics:ListApplications", + "kinesisanalytics:ListTagsForResource", + "kinesisvideo:DescribeEdgeConfiguration", + "kinesisvideo:DescribeMappedResourceConfiguration", + "kinesisvideo:DescribeMediaStorageConfiguration", + "kinesisvideo:DescribeNotificationConfiguration", + "kinesisvideo:DescribeSignalingChannel", + "kinesisvideo:DescribeStream", + "kinesisvideo:ListSignalingChannels", + "kinesisvideo:ListStreams", + "kinesisvideo:ListTagsForResource", + "kinesisvideo:ListTagsForStream", + "kms:Describe*", + "kms:Get*", + "kms:List*", + "lambda:GetAccountSettings", + "lambda:GetFunctionConfiguration", + "lambda:GetFunctionEventInvokeConfig", + "lambda:GetLayerVersionPolicy", + "lambda:GetPolicy", + "lambda:List*", + "lex:DescribeBot", + "lex:DescribeResourcePolicy", + "lex:ListBots", + "license-manager:List*", + "lightsail:GetBuckets", + "lightsail:GetContainerServices", + "lightsail:GetDisks", + "lightsail:GetDiskSnapshots", + "lightsail:GetInstances", + "lightsail:GetLoadBalancers", + "logs:Describe*", + "logs:GetLogDelivery", + "logs:ListLogDeliveries", + "logs:ListTagsForResource", + "logs:ListTagsLogGroup", + "lookoutequipment:ListDatasets", + "lookoutmetrics:ListAnomalyDetectors", + "lookoutvision:ListProjects", + "m2:GetApplication", + "m2:GetEnvironment", + "m2:ListApplications", + "m2:ListEnvironments", + "m2:ListTagsForResource", + "machinelearning:DescribeMLModels", + "macie2:ListFindings", + "managedblockchain:ListNetworks", + "mechanicalturk:ListHITs", + "mediaconnect:Describe*", + "mediaconnect:List*", + "medialive:ListChannels", + "mediapackage-vod:DescribePackagingGroup", + "mediapackage-vod:ListPackagingGroups", + "mediapackage:DescribeOriginEndpoint", + "mediapackage:ListOriginEndpoints", + "mediastore:GetContainerPolicy", + "mediastore:GetCorsPolicy", + "mediastore:ListContainers", + "memorydb:DescribeClusters", + "mq:DescribeBroker", + "mq:DescribeBrokerEngineTypes", + "mq:DescribeBrokerInstanceOptions", + "mq:DescribeConfiguration", + "mq:DescribeConfigurationRevision", + "mq:DescribeUser", + "mq:ListBrokers", + "mq:ListConfigurationRevisions", + "mq:ListConfigurations", + "mq:ListTags", + "mq:ListUsers", + "network-firewall:DescribeFirewall", + "network-firewall:DescribeFirewallPolicy", + "network-firewall:DescribeLoggingConfiguration", + "network-firewall:DescribeResourcePolicy", + "network-firewall:DescribeRuleGroup", + "network-firewall:ListFirewallPolicies", + "network-firewall:ListFirewalls", + "network-firewall:ListRuleGroups", + "networkmanager:DescribeGlobalNetworks", + "nimble:ListStudios", + "opsworks-cm:DescribeServers", + "opsworks:DescribeStacks", + "organizations:Describe*", + "organizations:List*", + "personalize:DescribeDatasetGroup", + "personalize:ListDatasetGroups", + "private-networks:ListNetworks", + "profile:GetDomain", + "profile:ListDomains", + "profile:ListIntegrations", + "qbusiness:ListApplications", + "qbusiness:ListDataSources", + "qbusiness:ListDataSourceSyncJobs", + "qbusiness:ListDocuments", + "qbusiness:ListGroups", + "qbusiness:ListIndices", + "qbusiness:ListPlugins", + "qbusiness:ListRetrievers", + "qbusiness:ListSubscriptions", + "qbusiness:ListTagsForResource", + "qbusiness:ListWebExperiences", + "qldb:DescribeJournalS3Export", + "qldb:DescribeLedger", + "qldb:ListJournalS3Exports", + "qldb:ListJournalS3ExportsForLedger", + "qldb:ListLedgers", + "quicksight:Describe*", + "quicksight:List*", + "ram:GetResourceShares", + "ram:List*", + "rds:Describe*", + "rds:DownloadDBLogFilePortion", + "rds:ListTagsForResource", + "redshift-serverless:GetNamespace", + "redshift-serverless:ListTagsForResource", + "redshift-serverless:ListWorkgroups", + "redshift:Describe*", + "rekognition:Describe*", + "rekognition:List*", + "resource-groups:ListGroupResources", + "robomaker:Describe*", + "robomaker:List*", + "route53:Get*", + "route53:List*", + "route53domains:GetDomainDetail", + "route53domains:GetOperationDetail", + "route53domains:ListDomains", + "route53domains:ListOperations", + "route53domains:ListTagsForDomain", + "route53resolver:Get*", + "route53resolver:List*", + "s3-outposts:ListEndpoints", + "s3-outposts:ListOutpostsWithS3", + "s3-outposts:ListSharedEndpoints", + "s3:GetAccelerateConfiguration", + "s3:GetAccessPoint", + "s3:GetAccessPointPolicy", + "s3:GetAccessPointPolicyStatus", + "s3:GetAccountPublicAccessBlock", + "s3:GetAnalyticsConfiguration", + "s3:GetBucket*", + "s3:GetEncryptionConfiguration", + "s3:GetInventoryConfiguration", + "s3:GetLifecycleConfiguration", + "s3:GetMetricsConfiguration", + "s3:GetMultiRegionAccessPointPolicy", + "s3:GetObjectAcl", + "s3:GetObjectVersionAcl", + "s3:GetReplicationConfiguration", + "s3:ListAccessPoints", + "s3:ListAllMyBuckets", + "s3:ListMultiRegionAccessPoints", + "sagemaker:Describe*", + "sagemaker:List*", + "schemas:DescribeCodeBinding", + "schemas:DescribeDiscoverer", + "schemas:DescribeRegistry", + "schemas:DescribeSchema", + "schemas:GetResourcePolicy", + "schemas:ListDiscoverers", + "schemas:ListRegistries", + "schemas:ListSchemas", + "schemas:ListSchemaVersions", + "schemas:ListTagsForResource", + "sdb:DomainMetadata", + "sdb:ListDomains", + "secretsmanager:DescribeSecret", + "secretsmanager:GetResourcePolicy", + "secretsmanager:ListSecrets", + "secretsmanager:ListSecretVersionIds", + "securityhub:BatchGetAutomationRules", + "securityhub:BatchGetConfigurationPolicyAssociations", + "securityhub:BatchGetControlEvaluations", + "securityhub:BatchGetSecurityControls", + "securityhub:BatchGetStandardsControlAssociations", + "securityhub:Describe*", + "securityhub:Get*", + "securityhub:List*", + "serverlessrepo:GetApplicationPolicy", + "serverlessrepo:List*", + "servicequotas:GetAssociationForServiceQuotaTemplate", + "servicequotas:GetAWSDefaultServiceQuota", + "servicequotas:GetRequestedServiceQuotaChange", + "servicequotas:GetServiceQuota", + "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", + "servicequotas:ListAWSDefaultServiceQuotas", + "servicequotas:ListRequestedServiceQuotaChangeHistory", + "servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota", + "servicequotas:ListServiceQuotaIncreaseRequestsInTemplate", + "servicequotas:ListServiceQuotas", + "servicequotas:ListServices", + "servicequotas:ListTagsForResource", + "ses:Describe*", + "ses:GetAccount", + "ses:GetAccountSendingEnabled", + "ses:GetConfigurationSet", + "ses:GetConfigurationSetEventDestinations", + "ses:GetDedicatedIps", + "ses:GetEmailIdentity", + "ses:GetIdentityDkimAttributes", + "ses:GetIdentityPolicies", + "ses:GetIdentityVerificationAttributes", + "ses:ListConfigurationSets", + "ses:ListDedicatedIpPools", + "ses:ListIdentities", + "ses:ListIdentityPolicies", + "ses:ListReceiptFilters", + "ses:ListReceiptRuleSets", + "ses:ListVerifiedEmailAddresses", + "shield:Describe*", + "shield:GetSubscriptionState", + "shield:List*", + "snowball:ListClusters", + "snowball:ListJobs", + "sns:GetPlatformApplicationAttributes", + "sns:GetTopicAttributes", + "sns:ListSubscriptions", + "sns:ListSubscriptionsByTopic", + "sns:ListTagsForResource", + "sns:ListTopics", + "sqs:GetQueueAttributes", + "sqs:ListDeadLetterSourceQueues", + "sqs:ListQueues", + "sqs:ListQueueTags", + "ssm:Describe*", + "ssm:GetAutomationExecution", + "ssm:GetServiceSetting", + "ssm:ListAssociations", + "ssm:ListAssociationVersions", + "ssm:ListCommands", + "ssm:ListComplianceItems", + "ssm:ListComplianceSummaries", + "ssm:ListDocumentMetadataHistory", + "ssm:ListDocuments", + "ssm:ListDocumentVersions", + "ssm:ListInventoryEntries", + "ssm:ListOpsMetadata", + "ssm:ListResourceComplianceSummaries", + "ssm:ListResourceDataSync", + "ssm:ListTagsForResource", + "sso:DescribeAccountAssignmentCreationStatus", + "sso:DescribePermissionSet", + "sso:DescribePermissionsPolicies", + "sso:List*", + "states:DescribeStateMachine", + "states:ListStateMachines", + "storagegateway:DescribeBandwidthRateLimit", + "storagegateway:DescribeCache", + "storagegateway:DescribeCachediSCSIVolumes", + "storagegateway:DescribeGatewayInformation", + "storagegateway:DescribeMaintenanceStartTime", + "storagegateway:DescribeNFSFileShares", + "storagegateway:DescribeSnapshotSchedule", + "storagegateway:DescribeStorediSCSIVolumes", + "storagegateway:DescribeTapeArchives", + "storagegateway:DescribeTapeRecoveryPoints", + "storagegateway:DescribeTapes", + "storagegateway:DescribeUploadBuffer", + "storagegateway:DescribeVTLDevices", + "storagegateway:DescribeWorkingStorage", + "storagegateway:List*", + "sts:GetAccessKeyInfo", + "support:DescribeTrustedAdvisorCheckRefreshStatuses", + "support:DescribeTrustedAdvisorCheckResult", + "support:DescribeTrustedAdvisorChecks", + "support:DescribeTrustedAdvisorCheckSummaries", + "synthetics:DescribeCanaries", + "synthetics:DescribeCanariesLastRun", + "synthetics:DescribeRuntimeVersions", + "synthetics:GetCanary", + "synthetics:GetCanaryRuns", + "synthetics:GetGroup", + "synthetics:ListAssociatedGroups", + "synthetics:ListGroupResources", + "synthetics:ListGroups", + "synthetics:ListTagsForResource", + "tag:GetResources", + "tag:GetTagKeys", + "transcribe:GetCallAnalyticsCategory", + "transcribe:GetMedicalVocabulary", + "transcribe:GetVocabulary", + "transcribe:GetVocabularyFilter", + "transcribe:ListCallAnalyticsCategories", + "transcribe:ListCallAnalyticsJobs", + "transcribe:ListLanguageModels", + "transcribe:ListMedicalTranscriptionJobs", + "transcribe:ListMedicalVocabularies", + "transcribe:ListTagsForResource", + "transcribe:ListTranscriptionJobs", + "transcribe:ListVocabularies", + "transcribe:ListVocabularyFilters", + "transfer:Describe*", + "transfer:List*", + "translate:List*", + "trustedadvisor:Describe*", + "voiceid:DescribeDomain", + "waf-regional:GetWebACL", + "waf-regional:ListResourcesForWebACL", + "waf-regional:ListTagsForResource", + "waf-regional:ListWebACLs", + "waf:GetWebACL", + "waf:ListTagsForResource", + "waf:ListWebACLs", + "wafv2:GetLoggingConfiguration", + "wafv2:GetWebACL", + "wafv2:GetWebACLForResource", + "wafv2:ListAvailableManagedRuleGroups", + "wafv2:ListIPSets", + "wafv2:ListLoggingConfigurations", + "wafv2:ListRegexPatternSets", + "wafv2:ListResourcesForWebACL", + "wafv2:ListRuleGroups", + "wafv2:ListTagsForResource", + "wafv2:ListWebACLs", + "wisdom:GetAssistant", + "workdocs:DescribeResourcePermissions", + "workspaces:Describe*", + "xray:GetEncryptionConfig", + "xray:GetGroup", + "xray:GetGroups", + "xray:GetSamplingRules", + "xray:GetSamplingTargets", + "xray:GetTraceSummaries", + "xray:ListTagsForResource" + ], + "Resource": "*" + }, + { + "Sid": "APIGatewayAccess", + "Effect": "Allow", + "Action": [ + "apigateway:GET" + ], + "Resource": [ + "arn:aws:apigateway:*::/apis", + "arn:aws:apigateway:*::/apis/*/authorizers/*", + "arn:aws:apigateway:*::/apis/*/authorizers", + "arn:aws:apigateway:*::/apis/*/cors", + "arn:aws:apigateway:*::/apis/*/deployments/*", + "arn:aws:apigateway:*::/apis/*/deployments", + "arn:aws:apigateway:*::/apis/*/exports/*", + "arn:aws:apigateway:*::/apis/*/integrations/*", + "arn:aws:apigateway:*::/apis/*/integrations", + "arn:aws:apigateway:*::/apis/*/models/*", + "arn:aws:apigateway:*::/apis/*/models", + "arn:aws:apigateway:*::/apis/*/routes/*", + "arn:aws:apigateway:*::/apis/*/routes", + "arn:aws:apigateway:*::/apis/*/stages", + "arn:aws:apigateway:*::/apis/*/stages/*", + "arn:aws:apigateway:*::/clientcertificates", + "arn:aws:apigateway:*::/clientcertificates/*", + "arn:aws:apigateway:*::/domainnames", + "arn:aws:apigateway:*::/domainnames/*/apimappings", + "arn:aws:apigateway:*::/restapis", + "arn:aws:apigateway:*::/restapis/*/authorizers/*", + "arn:aws:apigateway:*::/restapis/*/authorizers", + "arn:aws:apigateway:*::/restapis/*/deployments/*", + "arn:aws:apigateway:*::/restapis/*/deployments", + "arn:aws:apigateway:*::/restapis/*/documentation/parts/*", + "arn:aws:apigateway:*::/restapis/*/documentation/parts", + "arn:aws:apigateway:*::/restapis/*/documentation/versions/*", + "arn:aws:apigateway:*::/restapis/*/documentation/versions", + "arn:aws:apigateway:*::/restapis/*/gatewayresponses/*", + "arn:aws:apigateway:*::/restapis/*/gatewayresponses", + "arn:aws:apigateway:*::/restapis/*/models/*", + "arn:aws:apigateway:*::/restapis/*/models", + "arn:aws:apigateway:*::/restapis/*/requestvalidators", + "arn:aws:apigateway:*::/restapis/*/requestvalidators/*", + "arn:aws:apigateway:*::/restapis/*/resources/*", + "arn:aws:apigateway:*::/restapis/*/resources", + "arn:aws:apigateway:*::/restapis/*/stages", + "arn:aws:apigateway:*::/restapis/*/stages/*", + "arn:aws:apigateway:*::/tags/*", + "arn:aws:apigateway:*::/vpclinks" + ] + } + ] +} \ No newline at end of file diff --git a/package-lock.json b/package-lock.json index a7ec0a67..c6f2d65a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "aws-iam-managed-policies", - "version": "0.0.292", + "version": "0.0.293", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "aws-iam-managed-policies", - "version": "0.0.292", + "version": "0.0.293", "license": "MIT", "dependencies": { "deep-object-diff": "^1.1.9" diff --git a/package.json b/package.json index 7e0269e8..eeeb6af0 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "aws-iam-managed-policies", - "version": "0.0.292", + "version": "0.0.293", "description": "Provides AWS IAM Managed Policies historical data as a convenient npm package that can be used in other OSS projects.", "main": "./dist/index.js", "types": "./dist/index.d.ts", diff --git a/src/managedPolicies.json b/src/managedPolicies.json index cf777245..2ceeddb4 100644 --- a/src/managedPolicies.json +++ b/src/managedPolicies.json @@ -179,8 +179,8 @@ }, "ReadOnlyAccess": { "arn": "arn:aws:iam::aws:policy/ReadOnlyAccess", - "latestVersionId": "v124", - "versionsCount": 124, + "latestVersionId": "v125", + "versionsCount": 125, "versions": { "v2": { "createdDate": "2015-04-21T16:37:57.000Z", @@ -108408,10 +108408,2444 @@ } ] } + }, + "v125": { + "createdDate": "2015-02-06T18:39:48.000Z", + "document": { + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "ReadOnlyActions", + "Effect": "Allow", + "Action": [ + "a4b:Get*", + "a4b:List*", + "a4b:Search*", + "access-analyzer:GetAccessPreview", + "access-analyzer:GetAnalyzedResource", + "access-analyzer:GetAnalyzer", + "access-analyzer:GetArchiveRule", + "access-analyzer:GetFinding", + "access-analyzer:GetGeneratedPolicy", + "access-analyzer:ListAccessPreviewFindings", + "access-analyzer:ListAccessPreviews", + "access-analyzer:ListAnalyzedResources", + "access-analyzer:ListAnalyzers", + "access-analyzer:ListArchiveRules", + "access-analyzer:ListFindings", + "access-analyzer:ListPolicyGenerations", + "access-analyzer:ListTagsForResource", + "access-analyzer:ValidatePolicy", + "account:GetAccountInformation", + "account:GetAlternateContact", + "account:GetChallengeQuestions", + "account:GetContactInformation", + "account:GetPrimaryEmail", + "account:GetRegionOptStatus", + "account:ListRegions", + "acm-pca:Describe*", + "acm-pca:Get*", + "acm-pca:List*", + "acm:Describe*", + "acm:Get*", + "acm:List*", + "aiops:GetInvestigation", + "aiops:GetInvestigationEvent", + "aiops:GetInvestigationGroup", + "aiops:GetInvestigationResource", + "aiops:ListInvestigationEvents", + "aiops:ListInvestigationGroups", + "aiops:ListInvestigations", + "airflow:ListEnvironments", + "airflow:ListTagsForResource", + "amplify:GetApp", + "amplify:GetBranch", + "amplify:GetDomainAssociation", + "amplify:GetJob", + "amplify:ListApps", + "amplify:ListBranches", + "amplify:ListDomainAssociations", + "amplify:ListJobs", + "aoss:BatchGetCollection", + "aoss:BatchGetLifecyclePolicy", + "aoss:BatchGetVpcEndpoint", + "aoss:GetAccessPolicy", + "aoss:GetAccountSettings", + "aoss:GetPoliciesStats", + "aoss:GetSecurityConfig", + "aoss:GetSecurityPolicy", + "aoss:ListAccessPolicies", + "aoss:ListCollections", + "aoss:ListLifecyclePolicies", + "aoss:ListSecurityConfigs", + "aoss:ListSecurityPolicies", + "aoss:ListTagsForResource", + "aoss:ListVpcEndpoints", + "apigateway:GET", + "appconfig:GetApplication", + "appconfig:GetConfiguration", + "appconfig:GetConfigurationProfile", + "appconfig:GetDeployment", + "appconfig:GetDeploymentStrategy", + "appconfig:GetEnvironment", + "appconfig:GetHostedConfigurationVersion", + "appconfig:ListApplications", + "appconfig:ListConfigurationProfiles", + "appconfig:ListDeployments", + "appconfig:ListDeploymentStrategies", + "appconfig:ListEnvironments", + "appconfig:ListHostedConfigurationVersions", + "appconfig:ListTagsForResource", + "appfabric:GetAppAuthorization", + "appfabric:GetAppBundle", + "appfabric:GetIngestion", + "appfabric:GetIngestionDestination", + "appfabric:ListAppAuthorizations", + "appfabric:ListAppBundles", + "appfabric:ListIngestionDestinations", + "appfabric:ListIngestions", + "appfabric:ListTagsForResource", + "appflow:DescribeConnector", + "appflow:DescribeConnectorEntity", + "appflow:DescribeConnectorFields", + "appflow:DescribeConnectorProfiles", + "appflow:DescribeConnectors", + "appflow:DescribeFlow", + "appflow:DescribeFlowExecution", + "appflow:DescribeFlowExecutionRecords", + "appflow:DescribeFlows", + "appflow:ListConnectorEntities", + "appflow:ListConnectorFields", + "appflow:ListConnectors", + "appflow:ListFlows", + "appflow:ListTagsForResource", + "application-autoscaling:Describe*", + "application-autoscaling:ListTagsForResource", + "application-signals:BatchGetServiceLevelObjectiveBudgetReport", + "application-signals:GetService", + "application-signals:GetServiceLevelObjective", + "application-signals:ListObservedEntities", + "application-signals:ListServiceDependencies", + "application-signals:ListServiceDependents", + "application-signals:ListServiceLevelObjectives", + "application-signals:ListServiceOperations", + "application-signals:ListServices", + "application-signals:ListTagsForResource", + "applicationinsights:Describe*", + "applicationinsights:List*", + "appmesh:Describe*", + "appmesh:List*", + "apprunner:DescribeAutoScalingConfiguration", + "apprunner:DescribeCustomDomains", + "apprunner:DescribeObservabilityConfiguration", + "apprunner:DescribeService", + "apprunner:DescribeVpcConnector", + "apprunner:DescribeVpcIngressConnection", + "apprunner:DescribeWebAclForService", + "apprunner:ListAssociatedServicesForWebAcl", + "apprunner:ListAutoScalingConfigurations", + "apprunner:ListConnections", + "apprunner:ListObservabilityConfigurations", + "apprunner:ListOperations", + "apprunner:ListServices", + "apprunner:ListServicesForAutoScalingConfiguration", + "apprunner:ListTagsForResource", + "apprunner:ListVpcConnectors", + "apprunner:ListVpcIngressConnections", + "appstream:Describe*", + "appstream:List*", + "appstudio:GetAccountStatus", + "appstudio:GetEnablementJobStatus", + "appsync:Get*", + "appsync:List*", + "apptest:GetTestCase", + "apptest:GetTestConfiguration", + "apptest:GetTestRunStep", + "apptest:GetTestSuite", + "apptest:ListTagsForResource", + "apptest:ListTestCases", + "apptest:ListTestConfigurations", + "apptest:ListTestRuns", + "apptest:ListTestRunSteps", + "apptest:ListTestRunTestCases", + "apptest:ListTestSuites", + "aps:DescribeAlertManagerDefinition", + "aps:DescribeLoggingConfiguration", + "aps:DescribeRuleGroupsNamespace", + "aps:DescribeScraper", + "aps:DescribeWorkspace", + "aps:GetAlertManagerSilence", + "aps:GetAlertManagerStatus", + "aps:GetDefaultScraperConfiguration", + "aps:GetLabels", + "aps:GetMetricMetadata", + "aps:GetSeries", + "aps:ListAlertManagerAlertGroups", + "aps:ListAlertManagerAlerts", + "aps:ListAlertManagerReceivers", + "aps:ListAlertManagerSilences", + "aps:ListAlerts", + "aps:ListRuleGroupsNamespaces", + "aps:ListRules", + "aps:ListScrapers", + "aps:ListTagsForResource", + "aps:ListWorkspaces", + "aps:QueryMetrics", + "arc-zonal-shift:GetAutoshiftObserverNotificationStatus", + "arc-zonal-shift:GetManagedResource", + "arc-zonal-shift:ListAutoshifts", + "arc-zonal-shift:ListManagedResources", + "arc-zonal-shift:ListZonalShifts", + "artifact:GetCustomerAgreement", + "artifact:GetReport", + "artifact:GetReportMetadata", + "artifact:GetTermForReport", + "artifact:ListAgreements", + "artifact:ListCustomerAgreements", + "artifact:ListReports", + "athena:Batch*", + "athena:Get*", + "athena:List*", + "auditmanager:GetAccountStatus", + "auditmanager:GetAssessment", + "auditmanager:GetAssessmentFramework", + "auditmanager:GetAssessmentReportUrl", + "auditmanager:GetChangeLogs", + "auditmanager:GetControl", + "auditmanager:GetDelegations", + "auditmanager:GetEvidence", + "auditmanager:GetEvidenceByEvidenceFolder", + "auditmanager:GetEvidenceFolder", + "auditmanager:GetEvidenceFoldersByAssessment", + "auditmanager:GetEvidenceFoldersByAssessmentControl", + "auditmanager:GetOrganizationAdminAccount", + "auditmanager:GetServicesInScope", + "auditmanager:GetSettings", + "auditmanager:ListAssessmentFrameworks", + "auditmanager:ListAssessmentReports", + "auditmanager:ListAssessments", + "auditmanager:ListControls", + "auditmanager:ListKeywordsForDataSource", + "auditmanager:ListNotifications", + "auditmanager:ListTagsForResource", + "auditmanager:ValidateAssessmentReportIntegrity", + "autoscaling-plans:Describe*", + "autoscaling-plans:GetScalingPlanResourceForecastData", + "autoscaling:Describe*", + "autoscaling:GetPredictiveScalingForecast", + "aws-portal:View*", + "backup-gateway:GetBandwidthRateLimitSchedule", + "backup-gateway:GetGateway", + "backup-gateway:GetHypervisor", + "backup-gateway:GetHypervisorPropertyMappings", + "backup-gateway:GetVirtualMachine", + "backup-gateway:ListGateways", + "backup-gateway:ListHypervisors", + "backup-gateway:ListTagsForResource", + "backup-gateway:ListVirtualMachines", + "backup:Describe*", + "backup:Get*", + "backup:List*", + "batch:Describe*", + "batch:List*", + "bedrock:GetAgent", + "bedrock:GetAgentActionGroup", + "bedrock:GetAgentAlias", + "bedrock:GetAgentKnowledgeBase", + "bedrock:GetAgentVersion", + "bedrock:GetCustomModel", + "bedrock:GetDataSource", + "bedrock:GetEvaluationJob", + "bedrock:GetFlow", + "bedrock:GetFlowAlias", + "bedrock:GetFlowVersion", + "bedrock:GetFoundationModel", + "bedrock:GetFoundationModelAvailability", + "bedrock:GetGuardrail", + "bedrock:GetInferenceProfile", + "bedrock:GetIngestionJob", + "bedrock:GetKnowledgeBase", + "bedrock:GetModelCustomizationJob", + "bedrock:GetModelInvocationLoggingConfiguration", + "bedrock:GetPrompt", + "bedrock:GetProvisionedModelThroughput", + "bedrock:GetUseCaseForModelAccess", + "bedrock:ListAgentActionGroups", + "bedrock:ListAgentAliases", + "bedrock:ListAgentKnowledgeBases", + "bedrock:ListAgents", + "bedrock:ListAgentVersions", + "bedrock:ListCustomModels", + "bedrock:ListDataSources", + "bedrock:ListEvaluationJobs", + "bedrock:ListFlowAliases", + "bedrock:ListFlows", + "bedrock:ListFlowVersions", + "bedrock:ListFoundationModelAgreementOffers", + "bedrock:ListFoundationModels", + "bedrock:ListGuardrails", + "bedrock:ListInferenceProfiles", + "bedrock:ListIngestionJobs", + "bedrock:ListKnowledgeBases", + "bedrock:ListModelCustomizationJobs", + "bedrock:ListPrompts", + "bedrock:ListProvisionedModelThroughputs", + "billing:GetBillingData", + "billing:GetBillingDetails", + "billing:GetBillingNotifications", + "billing:GetBillingPreferences", + "billing:GetContractInformation", + "billing:GetCredits", + "billing:GetIAMAccessPreference", + "billing:GetSellerOfRecord", + "billing:ListBillingViews", + "billingconductor:GetBillingGroupCostReport", + "billingconductor:ListAccountAssociations", + "billingconductor:ListBillingGroupCostReports", + "billingconductor:ListBillingGroups", + "billingconductor:ListCustomLineItems", + "billingconductor:ListCustomLineItemVersions", + "billingconductor:ListPricingPlans", + "billingconductor:ListPricingPlansAssociatedWithPricingRule", + "billingconductor:ListPricingRules", + "billingconductor:ListPricingRulesAssociatedToPricingPlan", + "billingconductor:ListResourcesAssociatedToCustomLineItem", + "billingconductor:ListTagsForResource", + "braket:GetDevice", + "braket:GetJob", + "braket:GetQuantumTask", + "braket:SearchDevices", + "braket:SearchJobs", + "braket:SearchQuantumTasks", + "budgets:Describe*", + "budgets:ListTagsForResource", + "budgets:View*", + "cassandra:Select", + "ce:DescribeCostCategoryDefinition", + "ce:DescribeNotificationSubscription", + "ce:DescribeReport", + "ce:GetAnomalies", + "ce:GetAnomalyMonitors", + "ce:GetAnomalySubscriptions", + "ce:GetApproximateUsageRecords", + "ce:GetCommitmentPurchaseAnalysis", + "ce:GetCostAndUsage", + "ce:GetCostAndUsageWithResources", + "ce:GetCostCategories", + "ce:GetCostForecast", + "ce:GetDimensionValues", + "ce:GetPreferences", + "ce:GetReservationCoverage", + "ce:GetReservationPurchaseRecommendation", + "ce:GetReservationUtilization", + "ce:GetRightsizingRecommendation", + "ce:GetSavingsPlanPurchaseRecommendationDetails", + "ce:GetSavingsPlansCoverage", + "ce:GetSavingsPlansPurchaseRecommendation", + "ce:GetSavingsPlansUtilization", + "ce:GetSavingsPlansUtilizationDetails", + "ce:GetTags", + "ce:GetUsageForecast", + "ce:ListCommitmentPurchaseAnalyses", + "ce:ListCostAllocationTagBackfillHistory", + "ce:ListCostAllocationTags", + "ce:ListCostCategoryDefinitions", + "ce:ListSavingsPlansPurchaseRecommendationGeneration", + "ce:ListTagsForResource", + "chatbot:Describe*", + "chatbot:Get*", + "chatbot:ListAssociations", + "chatbot:ListCustomActions", + "chatbot:ListMicrosoftTeamsChannelConfigurations", + "chatbot:ListMicrosoftTeamsConfiguredTeams", + "chatbot:ListMicrosoftTeamsUserIdentities", + "chatbot:ListTagsForResource", + "chime:Get*", + "chime:List*", + "chime:Retrieve*", + "chime:Search*", + "chime:Validate*", + "cleanrooms-ml:GetAudienceGenerationJob", + "cleanrooms-ml:GetAudienceModel", + "cleanrooms-ml:GetConfiguredAudienceModel", + "cleanrooms-ml:GetConfiguredAudienceModelPolicy", + "cleanrooms-ml:GetTrainingDataset", + "cleanrooms-ml:ListAudienceExportJobs", + "cleanrooms-ml:ListAudienceGenerationJobs", + "cleanrooms-ml:ListAudienceModels", + "cleanrooms-ml:ListConfiguredAudienceModels", + "cleanrooms-ml:ListTagsForResource", + "cleanrooms-ml:ListTrainingDatasets", + "cleanrooms:BatchGetCollaborationAnalysisTemplate", + "cleanrooms:BatchGetSchema", + "cleanrooms:BatchGetSchemaAnalysisRule", + "cleanrooms:GetAnalysisTemplate", + "cleanrooms:GetCollaboration", + "cleanrooms:GetCollaborationAnalysisTemplate", + "cleanrooms:GetCollaborationConfiguredAudienceModelAssociation", + "cleanrooms:GetCollaborationIdNamespaceAssociation", + "cleanrooms:GetCollaborationPrivacyBudgetTemplate", + "cleanrooms:GetConfiguredAudienceModelAssociation", + "cleanrooms:GetConfiguredTable", + "cleanrooms:GetConfiguredTableAnalysisRule", + "cleanrooms:GetConfiguredTableAssociation", + "cleanrooms:GetConfiguredTableAssociationAnalysisRule", + "cleanrooms:GetIdMappingTable", + "cleanrooms:GetIdNamespaceAssociation", + "cleanrooms:GetMembership", + "cleanrooms:GetPrivacyBudgetTemplate", + "cleanrooms:GetProtectedQuery", + "cleanrooms:GetSchema", + "cleanrooms:GetSchemaAnalysisRule", + "cleanrooms:ListAnalysisTemplates", + "cleanrooms:ListCollaborationAnalysisTemplates", + "cleanrooms:ListCollaborationConfiguredAudienceModelAssociations", + "cleanrooms:ListCollaborationIdNamespaceAssociations", + "cleanrooms:ListCollaborationPrivacyBudgets", + "cleanrooms:ListCollaborationPrivacyBudgetTemplates", + "cleanrooms:ListCollaborations", + "cleanrooms:ListConfiguredAudienceModelAssociations", + "cleanrooms:ListConfiguredTableAssociations", + "cleanrooms:ListConfiguredTables", + "cleanrooms:ListIdMappingTables", + "cleanrooms:ListIdNamespaceAssociations", + "cleanrooms:ListMembers", + "cleanrooms:ListMemberships", + "cleanrooms:ListPrivacyBudgets", + "cleanrooms:ListPrivacyBudgetTemplates", + "cleanrooms:ListProtectedQueries", + "cleanrooms:ListSchemas", + "cleanrooms:ListTagsForResource", + "cleanrooms:PreviewPrivacyImpact", + "cloud9:Describe*", + "cloud9:List*", + "clouddirectory:BatchRead", + "clouddirectory:Get*", + "clouddirectory:List*", + "clouddirectory:LookupPolicy", + "cloudformation:Describe*", + "cloudformation:Detect*", + "cloudformation:Estimate*", + "cloudformation:Get*", + "cloudformation:List*", + "cloudformation:ValidateTemplate", + "cloudfront-keyvaluestore:Describe*", + "cloudfront-keyvaluestore:Get*", + "cloudfront-keyvaluestore:List*", + "cloudfront:Describe*", + "cloudfront:Get*", + "cloudfront:List*", + "cloudhsm:Describe*", + "cloudhsm:List*", + "cloudsearch:Describe*", + "cloudsearch:List*", + "cloudtrail:Describe*", + "cloudtrail:Get*", + "cloudtrail:List*", + "cloudtrail:LookupEvents", + "cloudwatch:Describe*", + "cloudwatch:GenerateQuery", + "cloudwatch:Get*", + "cloudwatch:List*", + "codeartifact:DescribeDomain", + "codeartifact:DescribePackage", + "codeartifact:DescribePackageVersion", + "codeartifact:DescribeRepository", + "codeartifact:GetAuthorizationToken", + "codeartifact:GetDomainPermissionsPolicy", + "codeartifact:GetPackageVersionAsset", + "codeartifact:GetPackageVersionReadme", + "codeartifact:GetRepositoryEndpoint", + "codeartifact:GetRepositoryPermissionsPolicy", + "codeartifact:ListDomains", + "codeartifact:ListPackages", + "codeartifact:ListPackageVersionAssets", + "codeartifact:ListPackageVersionDependencies", + "codeartifact:ListPackageVersions", + "codeartifact:ListRepositories", + "codeartifact:ListRepositoriesInDomain", + "codeartifact:ListTagsForResource", + "codeartifact:ReadFromRepository", + "codebuild:BatchGet*", + "codebuild:DescribeCodeCoverages", + "codebuild:DescribeTestCases", + "codebuild:List*", + "codecatalyst:GetBillingAuthorization", + "codecatalyst:GetConnection", + "codecatalyst:GetPendingConnection", + "codecatalyst:ListConnections", + "codecatalyst:ListIamRolesForConnection", + "codecatalyst:ListTagsForResource", + "codecommit:BatchGet*", + "codecommit:Describe*", + "codecommit:Get*", + "codecommit:GitPull", + "codecommit:List*", + "codedeploy:BatchGet*", + "codedeploy:Get*", + "codedeploy:List*", + "codeguru-profiler:Describe*", + "codeguru-profiler:Get*", + "codeguru-profiler:List*", + "codeguru-reviewer:Describe*", + "codeguru-reviewer:Get*", + "codeguru-reviewer:List*", + "codepipeline:Get*", + "codepipeline:List*", + "codestar-connections:GetConnection", + "codestar-connections:GetHost", + "codestar-connections:GetRepositoryLink", + "codestar-connections:GetRepositorySyncStatus", + "codestar-connections:GetResourceSyncStatus", + "codestar-connections:GetSyncConfiguration", + "codestar-connections:ListConnections", + "codestar-connections:ListHosts", + "codestar-connections:ListRepositoryLinks", + "codestar-connections:ListRepositorySyncDefinitions", + "codestar-connections:ListSyncConfigurations", + "codestar-connections:ListTagsForResource", + "codestar-notifications:describeNotificationRule", + "codestar-notifications:listEventTypes", + "codestar-notifications:listNotificationRules", + "codestar-notifications:listTagsForResource", + "codestar-notifications:ListTargets", + "codestar:Describe*", + "codestar:Get*", + "codestar:List*", + "codestar:Verify*", + "cognito-identity:Describe*", + "cognito-identity:GetCredentialsForIdentity", + "cognito-identity:GetIdentityPoolAnalytics", + "cognito-identity:GetIdentityPoolDailyAnalytics", + "cognito-identity:GetIdentityPoolRoles", + "cognito-identity:GetIdentityProviderDailyAnalytics", + "cognito-identity:GetOpenIdToken", + "cognito-identity:GetOpenIdTokenForDeveloperIdentity", + "cognito-identity:List*", + "cognito-identity:Lookup*", + "cognito-idp:AdminGet*", + "cognito-idp:AdminList*", + "cognito-idp:Describe*", + "cognito-idp:Get*", + "cognito-idp:List*", + "cognito-sync:Describe*", + "cognito-sync:Get*", + "cognito-sync:List*", + "cognito-sync:QueryRecords", + "comprehend:BatchDetect*", + "comprehend:Classify*", + "comprehend:Contains*", + "comprehend:Describe*", + "comprehend:Detect*", + "comprehend:List*", + "compute-optimizer:DescribeRecommendationExportJobs", + "compute-optimizer:GetAutoScalingGroupRecommendations", + "compute-optimizer:GetEBSVolumeRecommendations", + "compute-optimizer:GetEC2InstanceRecommendations", + "compute-optimizer:GetEC2RecommendationProjectedMetrics", + "compute-optimizer:GetECSServiceRecommendationProjectedMetrics", + "compute-optimizer:GetECSServiceRecommendations", + "compute-optimizer:GetEffectiveRecommendationPreferences", + "compute-optimizer:GetEnrollmentStatus", + "compute-optimizer:GetEnrollmentStatusesForOrganization", + "compute-optimizer:GetIdleRecommendations", + "compute-optimizer:GetLambdaFunctionRecommendations", + "compute-optimizer:GetLicenseRecommendations", + "compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics", + "compute-optimizer:GetRDSDatabaseRecommendations", + "compute-optimizer:GetRecommendationPreferences", + "compute-optimizer:GetRecommendationSummaries", + "config:BatchGetAggregateResourceConfig", + "config:BatchGetResourceConfig", + "config:Deliver*", + "config:Describe*", + "config:Get*", + "config:List*", + "config:SelectAggregateResourceConfig", + "config:SelectResourceConfig", + "connect:Describe*", + "connect:GetContactAttributes", + "connect:GetCurrentMetricData", + "connect:GetCurrentUserData", + "connect:GetFederationToken", + "connect:GetMetricData", + "connect:GetMetricDataV2", + "connect:GetTaskTemplate", + "connect:GetTrafficDistribution", + "connect:List*", + "consoleapp:GetDeviceIdentity", + "consoleapp:ListDeviceIdentities", + "consolidatedbilling:GetAccountBillingRole", + "consolidatedbilling:ListLinkedAccounts", + "controlcatalog:ListCommonControls", + "controlcatalog:ListDomains", + "controlcatalog:ListObjectives", + "cost-optimization-hub:GetPreferences", + "cost-optimization-hub:GetRecommendation", + "cost-optimization-hub:ListEnrollmentStatuses", + "cost-optimization-hub:ListRecommendations", + "cost-optimization-hub:ListRecommendationSummaries", + "cur:GetClassicReport", + "cur:GetClassicReportPreferences", + "cur:GetUsageReport", + "customer-verification:GetCustomerVerificationDetails", + "customer-verification:GetCustomerVerificationEligibility", + "databrew:DescribeDataset", + "databrew:DescribeJob", + "databrew:DescribeJobRun", + "databrew:DescribeProject", + "databrew:DescribeRecipe", + "databrew:DescribeRuleset", + "databrew:DescribeSchedule", + "databrew:ListDatasets", + "databrew:ListJobRuns", + "databrew:ListJobs", + "databrew:ListProjects", + "databrew:ListRecipes", + "databrew:ListRecipeVersions", + "databrew:ListRulesets", + "databrew:ListSchedules", + "databrew:ListTagsForResource", + "dataexchange:Get*", + "dataexchange:List*", + "datapipeline:Describe*", + "datapipeline:EvaluateExpression", + "datapipeline:Get*", + "datapipeline:List*", + "datapipeline:QueryObjects", + "datapipeline:Validate*", + "datasync:Describe*", + "datasync:List*", + "datazone:GetAsset", + "datazone:GetAssetType", + "datazone:GetDataProduct", + "datazone:GetDataSource", + "datazone:GetDataSourceRun", + "datazone:GetDomain", + "datazone:GetDomainSharingPolicy", + "datazone:GetDomainUnit", + "datazone:GetEnvironment", + "datazone:GetEnvironmentAction", + "datazone:GetEnvironmentBlueprint", + "datazone:GetEnvironmentBlueprintConfiguration", + "datazone:GetEnvironmentProfile", + "datazone:GetFormType", + "datazone:GetGlossary", + "datazone:GetGlossaryTerm", + "datazone:GetGroupProfile", + "datazone:GetLineageNode", + "datazone:GetListing", + "datazone:GetMetadataGenerationRun", + "datazone:GetProject", + "datazone:GetProjectProfile", + "datazone:GetSubscription", + "datazone:GetSubscriptionEligibility", + "datazone:GetSubscriptionGrant", + "datazone:GetSubscriptionRequestDetails", + "datazone:GetSubscriptionTarget", + "datazone:GetTimeSeriesDataPoint", + "datazone:GetUserProfile", + "datazone:ListAccountEnvironments", + "datazone:ListAssetRevisions", + "datazone:ListDataProductRevisions", + "datazone:ListDataSourceRunActivities", + "datazone:ListDataSourceRuns", + "datazone:ListDataSources", + "datazone:ListDomains", + "datazone:ListDomainUnitsForParent", + "datazone:ListEntityOwners", + "datazone:ListEnvironmentActions", + "datazone:ListEnvironmentBlueprintConfigurations", + "datazone:ListEnvironmentBlueprintConfigurationSummaries", + "datazone:ListEnvironmentBlueprints", + "datazone:ListEnvironmentProfiles", + "datazone:ListEnvironments", + "datazone:ListGroupsForUser", + "datazone:ListLineageNodeHistory", + "datazone:ListNotifications", + "datazone:ListPolicyGrants", + "datazone:ListProjectMemberships", + "datazone:ListProjectProfiles", + "datazone:ListProjects", + "datazone:ListSubscriptionGrants", + "datazone:ListSubscriptionRequests", + "datazone:ListSubscriptions", + "datazone:ListSubscriptionTargets", + "datazone:ListTagsForResource", + "datazone:ListTimeSeriesDataPoints", + "datazone:Search", + "datazone:SearchGroupProfiles", + "datazone:SearchListings", + "datazone:SearchTypes", + "datazone:SearchUserProfiles", + "dax:BatchGetItem", + "dax:Describe*", + "dax:GetItem", + "dax:ListTags", + "dax:Query", + "dax:Scan", + "deadline:BatchGetJobEntity", + "deadline:GetApplicationVersion", + "deadline:GetBudget", + "deadline:GetFarm", + "deadline:GetFleet", + "deadline:GetJob", + "deadline:GetLicenseEndpoint", + "deadline:GetMonitor", + "deadline:GetQueue", + "deadline:GetQueueEnvironment", + "deadline:GetQueueFleetAssociation", + "deadline:GetSession", + "deadline:GetSessionAction", + "deadline:GetSessionsStatisticsAggregation", + "deadline:GetStep", + "deadline:GetStorageProfile", + "deadline:GetStorageProfileForQueue", + "deadline:GetTask", + "deadline:GetWorker", + "deadline:ListAvailableMeteredProducts", + "deadline:ListBudgets", + "deadline:ListFarmMembers", + "deadline:ListFarms", + "deadline:ListFleetMembers", + "deadline:ListFleets", + "deadline:ListJobMembers", + "deadline:ListJobParameterDefinitions", + "deadline:ListJobs", + "deadline:ListLicenseEndpoints", + "deadline:ListMeteredProducts", + "deadline:ListMonitors", + "deadline:ListQueueEnvironments", + "deadline:ListQueueFleetAssociations", + "deadline:ListQueueMembers", + "deadline:ListQueues", + "deadline:ListSessionActions", + "deadline:ListSessions", + "deadline:ListSessionsForWorker", + "deadline:ListStepConsumers", + "deadline:ListStepDependencies", + "deadline:ListSteps", + "deadline:ListStorageProfiles", + "deadline:ListStorageProfilesForQueue", + "deadline:ListTagsForResource", + "deadline:ListTasks", + "deadline:ListWorkers", + "deadline:SearchJobs", + "deadline:SearchSteps", + "deadline:SearchTasks", + "deadline:SearchWorkers", + "deepcomposer:GetComposition", + "deepcomposer:GetModel", + "deepcomposer:GetSampleModel", + "deepcomposer:ListCompositions", + "deepcomposer:ListModels", + "deepcomposer:ListSampleModels", + "deepcomposer:ListTrainingTopics", + "detective:BatchGetGraphMemberDatasources", + "detective:BatchGetMembershipDatasources", + "detective:Get*", + "detective:List*", + "detective:SearchGraph", + "devicefarm:Get*", + "devicefarm:List*", + "devops-guru:DescribeAccountHealth", + "devops-guru:DescribeAccountOverview", + "devops-guru:DescribeAnomaly", + "devops-guru:DescribeEventSourcesConfig", + "devops-guru:DescribeFeedback", + "devops-guru:DescribeInsight", + "devops-guru:DescribeOrganizationHealth", + "devops-guru:DescribeOrganizationOverview", + "devops-guru:DescribeOrganizationResourceCollectionHealth", + "devops-guru:DescribeResourceCollectionHealth", + "devops-guru:DescribeServiceIntegration", + "devops-guru:GetCostEstimation", + "devops-guru:GetResourceCollection", + "devops-guru:ListAnomaliesForInsight", + "devops-guru:ListAnomalousLogGroups", + "devops-guru:ListEvents", + "devops-guru:ListInsights", + "devops-guru:ListMonitoredResources", + "devops-guru:ListNotificationChannels", + "devops-guru:ListOrganizationInsights", + "devops-guru:ListRecommendations", + "devops-guru:SearchInsights", + "devops-guru:StartCostEstimation", + "directconnect:Describe*", + "discovery:Describe*", + "discovery:Get*", + "discovery:List*", + "dlm:Get*", + "dms:Describe*", + "dms:List*", + "dms:Test*", + "drs:DescribeJobLogItems", + "drs:DescribeJobs", + "drs:DescribeLaunchConfigurationTemplates", + "drs:DescribeRecoveryInstances", + "drs:DescribeRecoverySnapshots", + "drs:DescribeReplicationConfigurationTemplates", + "drs:DescribeSourceNetworks", + "drs:DescribeSourceServers", + "drs:GetFailbackReplicationConfiguration", + "drs:GetLaunchConfiguration", + "drs:GetReplicationConfiguration", + "drs:ListExtensibleSourceServers", + "drs:ListLaunchActions", + "drs:ListStagingAccounts", + "drs:ListTagsForResource", + "ds:Check*", + "ds:Describe*", + "ds:Get*", + "ds:List*", + "ds:Verify*", + "dsql:GetCluster", + "dsql:ListClusters", + "dsql:ListTagsForResource", + "dynamodb:BatchGet*", + "dynamodb:Describe*", + "dynamodb:Get*", + "dynamodb:List*", + "dynamodb:PartiQLSelect", + "dynamodb:Query", + "dynamodb:Scan", + "ec2:Describe*", + "ec2:DescribeInstanceImageMetadata", + "ec2:Get*", + "ec2:ListImagesInRecycleBin", + "ec2:ListSnapshotsInRecycleBin", + "ec2:SearchLocalGatewayRoutes", + "ec2:SearchTransitGatewayRoutes", + "ec2messages:Get*", + "ecr-public:BatchCheckLayerAvailability", + "ecr-public:DescribeImages", + "ecr-public:DescribeImageTags", + "ecr-public:DescribeRegistries", + "ecr-public:DescribeRepositories", + "ecr-public:GetAuthorizationToken", + "ecr-public:GetRegistryCatalogData", + "ecr-public:GetRepositoryCatalogData", + "ecr-public:GetRepositoryPolicy", + "ecr-public:ListTagsForResource", + "ecr:BatchCheck*", + "ecr:BatchGet*", + "ecr:Describe*", + "ecr:Get*", + "ecr:List*", + "ecs:Describe*", + "ecs:List*", + "eks:Describe*", + "eks:List*", + "elastic-inference:DescribeAcceleratorOfferings", + "elastic-inference:DescribeAccelerators", + "elastic-inference:DescribeAcceleratorTypes", + "elastic-inference:ListTagsForResource", + "elasticache:Describe*", + "elasticache:List*", + "elasticbeanstalk:Check*", + "elasticbeanstalk:Describe*", + "elasticbeanstalk:List*", + "elasticbeanstalk:Request*", + "elasticbeanstalk:Retrieve*", + "elasticbeanstalk:Validate*", + "elasticfilesystem:Describe*", + "elasticfilesystem:ListTagsForResource", + "elasticloadbalancing:Describe*", + "elasticmapreduce:Describe*", + "elasticmapreduce:GetBlockPublicAccessConfiguration", + "elasticmapreduce:List*", + "elasticmapreduce:View*", + "elastictranscoder:List*", + "elastictranscoder:Read*", + "elemental-appliances-software:Get*", + "elemental-appliances-software:List*", + "emr-containers:DescribeJobRun", + "emr-containers:DescribeManagedEndpoint", + "emr-containers:DescribeVirtualCluster", + "emr-containers:ListJobRuns", + "emr-containers:ListManagedEndpoints", + "emr-containers:ListTagsForResource", + "emr-containers:ListVirtualClusters", + "emr-serverless:GetApplication", + "emr-serverless:GetDashboardForJobRun", + "emr-serverless:GetJobRun", + "emr-serverless:ListApplications", + "emr-serverless:ListJobRuns", + "emr-serverless:ListTagsForResource", + "es:Describe*", + "es:ESHttpGet", + "es:ESHttpHead", + "es:Get*", + "es:List*", + "events:Describe*", + "events:List*", + "events:Test*", + "evidently:GetExperiment", + "evidently:GetExperimentResults", + "evidently:GetFeature", + "evidently:GetLaunch", + "evidently:GetProject", + "evidently:GetSegment", + "evidently:ListExperiments", + "evidently:ListFeatures", + "evidently:ListLaunches", + "evidently:ListProjects", + "evidently:ListSegmentReferences", + "evidently:ListSegments", + "evidently:ListTagsForResource", + "evidently:TestSegmentPattern", + "firehose:Describe*", + "firehose:List*", + "fis:GetAction", + "fis:GetExperiment", + "fis:GetExperimentTargetAccountConfiguration", + "fis:GetExperimentTemplate", + "fis:GetTargetAccountConfiguration", + "fis:GetTargetResourceType", + "fis:ListActions", + "fis:ListExperimentResolvedTargets", + "fis:ListExperiments", + "fis:ListExperimentTargetAccountConfigurations", + "fis:ListExperimentTemplates", + "fis:ListTagsForResource", + "fis:ListTargetAccountConfigurations", + "fis:ListTargetResourceTypes", + "fms:GetAdminAccount", + "fms:GetAppsList", + "fms:GetComplianceDetail", + "fms:GetNotificationChannel", + "fms:GetPolicy", + "fms:GetProtectionStatus", + "fms:GetProtocolsList", + "fms:GetViolationDetails", + "fms:ListAppsLists", + "fms:ListComplianceStatus", + "fms:ListMemberAccounts", + "fms:ListPolicies", + "fms:ListProtocolsLists", + "fms:ListTagsForResource", + "forecast:DescribeAutoPredictor", + "forecast:DescribeDataset", + "forecast:DescribeDatasetGroup", + "forecast:DescribeDatasetImportJob", + "forecast:DescribeExplainability", + "forecast:DescribeExplainabilityExport", + "forecast:DescribeForecast", + "forecast:DescribeForecastExportJob", + "forecast:DescribeMonitor", + "forecast:DescribePredictor", + "forecast:DescribePredictorBacktestExportJob", + "forecast:DescribeWhatIfAnalysis", + "forecast:DescribeWhatIfForecast", + "forecast:DescribeWhatIfForecastExport", + "forecast:GetAccuracyMetrics", + "forecast:ListDatasetGroups", + "forecast:ListDatasetImportJobs", + "forecast:ListDatasets", + "forecast:ListExplainabilities", + "forecast:ListExplainabilityExports", + "forecast:ListForecastExportJobs", + "forecast:ListForecasts", + "forecast:ListMonitorEvaluations", + "forecast:ListMonitors", + "forecast:ListPredictorBacktestExportJobs", + "forecast:ListPredictors", + "forecast:ListWhatIfAnalyses", + "forecast:ListWhatIfForecastExports", + "forecast:ListWhatIfForecasts", + "forecast:QueryForecast", + "forecast:QueryWhatIfForecast", + "frauddetector:BatchGetVariable", + "frauddetector:DescribeDetector", + "frauddetector:DescribeModelVersions", + "frauddetector:GetBatchImportJobs", + "frauddetector:GetBatchPredictionJobs", + "frauddetector:GetDeleteEventsByEventTypeStatus", + "frauddetector:GetDetectors", + "frauddetector:GetDetectorVersion", + "frauddetector:GetEntityTypes", + "frauddetector:GetEvent", + "frauddetector:GetEventPredictionMetadata", + "frauddetector:GetEventTypes", + "frauddetector:GetExternalModels", + "frauddetector:GetKMSEncryptionKey", + "frauddetector:GetLabels", + "frauddetector:GetListElements", + "frauddetector:GetListsMetadata", + "frauddetector:GetModels", + "frauddetector:GetModelVersion", + "frauddetector:GetOutcomes", + "frauddetector:GetRules", + "frauddetector:GetVariables", + "frauddetector:ListEventPredictions", + "frauddetector:ListTagsForResource", + "freertos:Describe*", + "freertos:List*", + "freetier:GetFreeTierAlertPreference", + "freetier:GetFreeTierUsage", + "fsx:Describe*", + "fsx:List*", + "gamelift:Describe*", + "gamelift:Get*", + "gamelift:List*", + "gamelift:ResolveAlias", + "gamelift:Search*", + "glacier:Describe*", + "glacier:Get*", + "glacier:List*", + "globalaccelerator:Describe*", + "globalaccelerator:List*", + "glue:BatchGetCrawlers", + "glue:BatchGetDevEndpoints", + "glue:BatchGetJobs", + "glue:BatchGetPartition", + "glue:BatchGetTableOptimizer", + "glue:BatchGetTriggers", + "glue:BatchGetWorkflows", + "glue:CheckSchemaVersionValidity", + "glue:GetCatalogImportStatus", + "glue:GetClassifier", + "glue:GetClassifiers", + "glue:GetCrawler", + "glue:GetCrawlerMetrics", + "glue:GetCrawlers", + "glue:GetDatabase", + "glue:GetDatabases", + "glue:GetDataCatalogEncryptionSettings", + "glue:GetDataflowGraph", + "glue:GetDevEndpoint", + "glue:GetDevEndpoints", + "glue:GetJob", + "glue:GetJobBookmark", + "glue:GetJobRun", + "glue:GetJobRuns", + "glue:GetJobs", + "glue:GetMapping", + "glue:GetMLTaskRun", + "glue:GetMLTaskRuns", + "glue:GetMLTransform", + "glue:GetMLTransforms", + "glue:GetPartition", + "glue:GetPartitions", + "glue:GetPlan", + "glue:GetRegistry", + "glue:GetResourcePolicy", + "glue:GetSchema", + "glue:GetSchemaByDefinition", + "glue:GetSchemaVersion", + "glue:GetSchemaVersionsDiff", + "glue:GetSecurityConfiguration", + "glue:GetSecurityConfigurations", + "glue:GetSession", + "glue:GetStatement", + "glue:GetTable", + "glue:GetTableOptimizer", + "glue:GetTables", + "glue:GetTableVersion", + "glue:GetTableVersions", + "glue:GetTags", + "glue:GetTrigger", + "glue:GetTriggers", + "glue:GetUserDefinedFunction", + "glue:GetUserDefinedFunctions", + "glue:GetWorkflow", + "glue:GetWorkflowRun", + "glue:GetWorkflowRunProperties", + "glue:GetWorkflowRuns", + "glue:ListCrawlers", + "glue:ListCrawls", + "glue:ListDevEndpoints", + "glue:ListJobs", + "glue:ListMLTransforms", + "glue:ListRegistries", + "glue:ListSchemas", + "glue:ListSchemaVersions", + "glue:ListSessions", + "glue:ListStatements", + "glue:ListTableOptimizerRuns", + "glue:ListTriggers", + "glue:ListWorkflows", + "glue:QuerySchemaVersionMetadata", + "glue:SearchTables", + "grafana:DescribeWorkspace", + "grafana:DescribeWorkspaceAuthentication", + "grafana:DescribeWorkspaceConfiguration", + "grafana:ListPermissions", + "grafana:ListTagsForResource", + "grafana:ListVersions", + "grafana:ListWorkspaces", + "greengrass:DescribeComponent", + "greengrass:Get*", + "greengrass:List*", + "groundstation:DescribeContact", + "groundstation:GetConfig", + "groundstation:GetDataflowEndpointGroup", + "groundstation:GetMinuteUsage", + "groundstation:GetMissionProfile", + "groundstation:GetSatellite", + "groundstation:ListConfigs", + "groundstation:ListContacts", + "groundstation:ListDataflowEndpointGroups", + "groundstation:ListGroundStations", + "groundstation:ListMissionProfiles", + "groundstation:ListSatellites", + "groundstation:ListTagsForResource", + "guardduty:Describe*", + "guardduty:Get*", + "guardduty:List*", + "health:Describe*", + "healthlake:DescribeFHIRDatastore", + "healthlake:DescribeFHIRExportJob", + "healthlake:DescribeFHIRImportJob", + "healthlake:GetCapabilities", + "healthlake:ListFHIRDatastores", + "healthlake:ListFHIRExportJobs", + "healthlake:ListFHIRImportJobs", + "healthlake:ListTagsForResource", + "healthlake:ReadResource", + "healthlake:SearchWithGet", + "healthlake:SearchWithPost", + "iam:Generate*", + "iam:Get*", + "iam:List*", + "iam:Simulate*", + "identity-sync:GetSyncProfile", + "identity-sync:GetSyncTarget", + "identity-sync:ListSyncFilters", + "identitystore-auth:BatchGetSession", + "identitystore-auth:ListSessions", + "identitystore:DescribeGroup", + "identitystore:DescribeGroupMembership", + "identitystore:DescribeUser", + "identitystore:GetGroupId", + "identitystore:GetGroupMembershipId", + "identitystore:GetUserId", + "identitystore:IsMemberInGroups", + "identitystore:ListGroupMemberships", + "identitystore:ListGroupMembershipsForMember", + "identitystore:ListGroups", + "identitystore:ListUsers", + "imagebuilder:Get*", + "imagebuilder:List*", + "importexport:Get*", + "importexport:List*", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", + "inspector2:BatchGetAccountStatus", + "inspector2:BatchGetFreeTrialInfo", + "inspector2:DescribeOrganizationConfiguration", + "inspector2:GetDelegatedAdminAccount", + "inspector2:GetFindingsReportStatus", + "inspector2:GetMember", + "inspector2:ListAccountPermissions", + "inspector2:ListCisScans", + "inspector2:ListCoverage", + "inspector2:ListCoverageStatistics", + "inspector2:ListDelegatedAdminAccounts", + "inspector2:ListFilters", + "inspector2:ListFindingAggregations", + "inspector2:ListFindings", + "inspector2:ListMembers", + "inspector2:ListTagsForResource", + "inspector2:ListUsageTotals", + "internetmonitor:GetHealthEvent", + "internetmonitor:GetInternetEvent", + "internetmonitor:GetMonitor", + "internetmonitor:ListHealthEvents", + "internetmonitor:ListInternetEvents", + "internetmonitor:ListMonitors", + "internetmonitor:ListTagsForResource", + "invoicing:GetInvoiceEmailDeliveryPreferences", + "invoicing:GetInvoicePDF", + "invoicing:ListInvoiceSummaries", + "iot:Describe*", + "iot:Get*", + "iot:List*", + "iot1click:DescribeDevice", + "iot1click:DescribePlacement", + "iot1click:DescribeProject", + "iot1click:GetDeviceMethods", + "iot1click:GetDevicesInPlacement", + "iot1click:ListDeviceEvents", + "iot1click:ListDevices", + "iot1click:ListPlacements", + "iot1click:ListProjects", + "iot1click:ListTagsForResource", + "iotanalytics:Describe*", + "iotanalytics:Get*", + "iotanalytics:List*", + "iotanalytics:SampleChannelData", + "iotevents:DescribeAlarm", + "iotevents:DescribeAlarmModel", + "iotevents:DescribeDetector", + "iotevents:DescribeDetectorModel", + "iotevents:DescribeInput", + "iotevents:DescribeLoggingOptions", + "iotevents:ListAlarmModels", + "iotevents:ListAlarmModelVersions", + "iotevents:ListAlarms", + "iotevents:ListDetectorModels", + "iotevents:ListDetectorModelVersions", + "iotevents:ListDetectors", + "iotevents:ListInputs", + "iotevents:ListTagsForResource", + "iotfleethub:DescribeApplication", + "iotfleethub:ListApplications", + "iotfleetwise:GetCampaign", + "iotfleetwise:GetDecoderManifest", + "iotfleetwise:GetFleet", + "iotfleetwise:GetLoggingOptions", + "iotfleetwise:GetModelManifest", + "iotfleetwise:GetRegisterAccountStatus", + "iotfleetwise:GetSignalCatalog", + "iotfleetwise:GetVehicle", + "iotfleetwise:GetVehicleStatus", + "iotfleetwise:ListCampaigns", + "iotfleetwise:ListDecoderManifestNetworkInterfaces", + "iotfleetwise:ListDecoderManifests", + "iotfleetwise:ListDecoderManifestSignals", + "iotfleetwise:ListFleets", + "iotfleetwise:ListFleetsForVehicle", + "iotfleetwise:ListModelManifestNodes", + "iotfleetwise:ListModelManifests", + "iotfleetwise:ListSignalCatalogNodes", + "iotfleetwise:ListSignalCatalogs", + "iotfleetwise:ListTagsForResource", + "iotfleetwise:ListVehicles", + "iotfleetwise:ListVehiclesInFleet", + "iotroborunner:GetDestination", + "iotroborunner:GetSite", + "iotroborunner:GetWorker", + "iotroborunner:GetWorkerFleet", + "iotroborunner:ListDestinations", + "iotroborunner:ListSites", + "iotroborunner:ListWorkerFleets", + "iotroborunner:ListWorkers", + "iotsitewise:Describe*", + "iotsitewise:Get*", + "iotsitewise:List*", + "iotwireless:GetDestination", + "iotwireless:GetDeviceProfile", + "iotwireless:GetEventConfigurationByResourceTypes", + "iotwireless:GetFuotaTask", + "iotwireless:GetLogLevelsByResourceTypes", + "iotwireless:GetMetricConfiguration", + "iotwireless:GetMetrics", + "iotwireless:GetMulticastGroup", + "iotwireless:GetMulticastGroupSession", + "iotwireless:GetNetworkAnalyzerConfiguration", + "iotwireless:GetPartnerAccount", + "iotwireless:GetPosition", + "iotwireless:GetPositionConfiguration", + "iotwireless:GetPositionEstimate", + "iotwireless:GetResourceEventConfiguration", + "iotwireless:GetResourceLogLevel", + "iotwireless:GetResourcePosition", + "iotwireless:GetServiceEndpoint", + "iotwireless:GetServiceProfile", + "iotwireless:GetWirelessDevice", + "iotwireless:GetWirelessDeviceImportTask", + "iotwireless:GetWirelessDeviceStatistics", + "iotwireless:GetWirelessGateway", + "iotwireless:GetWirelessGatewayCertificate", + "iotwireless:GetWirelessGatewayFirmwareInformation", + "iotwireless:GetWirelessGatewayStatistics", + "iotwireless:GetWirelessGatewayTask", + "iotwireless:GetWirelessGatewayTaskDefinition", + "iotwireless:ListDestinations", + "iotwireless:ListDeviceProfiles", + "iotwireless:ListDevicesForWirelessDeviceImportTask", + "iotwireless:ListEventConfigurations", + "iotwireless:ListFuotaTasks", + "iotwireless:ListMulticastGroups", + "iotwireless:ListMulticastGroupsByFuotaTask", + "iotwireless:ListNetworkAnalyzerConfigurations", + "iotwireless:ListPartnerAccounts", + "iotwireless:ListPositionConfigurations", + "iotwireless:ListQueuedMessages", + "iotwireless:ListServiceProfiles", + "iotwireless:ListTagsForResource", + "iotwireless:ListWirelessDeviceImportTasks", + "iotwireless:ListWirelessDevices", + "iotwireless:ListWirelessGateways", + "iotwireless:ListWirelessGatewayTaskDefinitions", + "ivs:BatchGetChannel", + "ivs:GetChannel", + "ivs:GetComposition", + "ivs:GetEncoderConfiguration", + "ivs:GetIngestConfiguration", + "ivs:GetParticipant", + "ivs:GetPlaybackKeyPair", + "ivs:GetPlaybackRestrictionPolicy", + "ivs:GetPublicKey", + "ivs:GetRecordingConfiguration", + "ivs:GetStage", + "ivs:GetStageSession", + "ivs:GetStorageConfiguration", + "ivs:GetStream", + "ivs:GetStreamSession", + "ivs:ListChannels", + "ivs:ListCompositions", + "ivs:ListEncoderConfigurations", + "ivs:ListIngestConfigurations", + "ivs:ListParticipantEvents", + "ivs:ListParticipants", + "ivs:ListPlaybackKeyPairs", + "ivs:ListPlaybackRestrictionPolicies", + "ivs:ListPublicKeys", + "ivs:ListRecordingConfigurations", + "ivs:ListStages", + "ivs:ListStageSessions", + "ivs:ListStorageConfigurations", + "ivs:ListStreamKeys", + "ivs:ListStreams", + "ivs:ListStreamSessions", + "ivs:ListTagsForResource", + "ivschat:GetLoggingConfiguration", + "ivschat:GetRoom", + "ivschat:ListLoggingConfigurations", + "ivschat:ListRooms", + "ivschat:ListTagsForResource", + "kafka:Describe*", + "kafka:DescribeCluster", + "kafka:DescribeClusterOperation", + "kafka:DescribeClusterV2", + "kafka:DescribeConfiguration", + "kafka:DescribeConfigurationRevision", + "kafka:Get*", + "kafka:GetBootstrapBrokers", + "kafka:GetCompatibleKafkaVersions", + "kafka:List*", + "kafka:ListClusterOperations", + "kafka:ListClusters", + "kafka:ListClustersV2", + "kafka:ListConfigurationRevisions", + "kafka:ListConfigurations", + "kafka:ListKafkaVersions", + "kafka:ListNodes", + "kafka:ListTagsForResource", + "kafkaconnect:DescribeConnector", + "kafkaconnect:DescribeCustomPlugin", + "kafkaconnect:DescribeWorkerConfiguration", + "kafkaconnect:ListConnectors", + "kafkaconnect:ListCustomPlugins", + "kafkaconnect:ListWorkerConfigurations", + "kendra:BatchGetDocumentStatus", + "kendra:DescribeDataSource", + "kendra:DescribeExperience", + "kendra:DescribeFaq", + "kendra:DescribeIndex", + "kendra:DescribePrincipalMapping", + "kendra:DescribeQuerySuggestionsBlockList", + "kendra:DescribeQuerySuggestionsConfig", + "kendra:DescribeThesaurus", + "kendra:GetQuerySuggestions", + "kendra:GetSnapshots", + "kendra:ListDataSources", + "kendra:ListDataSourceSyncJobs", + "kendra:ListEntityPersonas", + "kendra:ListExperienceEntities", + "kendra:ListExperiences", + "kendra:ListFaqs", + "kendra:ListGroupsOlderThanOrderingId", + "kendra:ListIndices", + "kendra:ListQuerySuggestionsBlockLists", + "kendra:ListTagsForResource", + "kendra:ListThesauri", + "kendra:Query", + "kinesis:Describe*", + "kinesis:Get*", + "kinesis:List*", + "kinesisanalytics:Describe*", + "kinesisanalytics:Discover*", + "kinesisanalytics:Get*", + "kinesisanalytics:List*", + "kinesisvideo:Describe*", + "kinesisvideo:Get*", + "kinesisvideo:List*", + "kms:Describe*", + "kms:Get*", + "kms:List*", + "lakeformation:DescribeResource", + "lakeformation:GetDataCellsFilter", + "lakeformation:GetDataLakeSettings", + "lakeformation:GetEffectivePermissionsForPath", + "lakeformation:GetLfTag", + "lakeformation:GetResourceLfTags", + "lakeformation:ListDataCellsFilter", + "lakeformation:ListLfTags", + "lakeformation:ListPermissions", + "lakeformation:ListResources", + "lakeformation:ListTableStorageOptimizers", + "lakeformation:SearchDatabasesByLfTags", + "lakeformation:SearchTablesByLfTags", + "lambda:Get*", + "lambda:List*", + "launchwizard:DescribeAdditionalNode", + "launchwizard:DescribeProvisionedApp", + "launchwizard:DescribeProvisioningEvents", + "launchwizard:DescribeSettingsSet", + "launchwizard:GetDeployment", + "launchwizard:GetInfrastructureSuggestion", + "launchwizard:GetIpAddress", + "launchwizard:GetResourceCostEstimate", + "launchwizard:GetResourceRecommendation", + "launchwizard:GetSettingsSet", + "launchwizard:GetWorkload", + "launchwizard:GetWorkloadAsset", + "launchwizard:GetWorkloadAssets", + "launchwizard:GetWorkloadDeploymentPattern", + "launchwizard:ListAdditionalNodes", + "launchwizard:ListAllowedResources", + "launchwizard:ListDeploymentEvents", + "launchwizard:ListDeployments", + "launchwizard:ListProvisionedApps", + "launchwizard:ListResourceCostEstimates", + "launchwizard:ListSettingsSets", + "launchwizard:ListTagsForResource", + "launchwizard:ListWorkloadDeploymentOptions", + "launchwizard:ListWorkloadDeploymentPatterns", + "launchwizard:ListWorkloads", + "lex:DescribeBot", + "lex:DescribeBotAlias", + "lex:DescribeBotChannel", + "lex:DescribeBotLocale", + "lex:DescribeBotReplica", + "lex:DescribeBotVersion", + "lex:DescribeExport", + "lex:DescribeImport", + "lex:DescribeIntent", + "lex:DescribeResourcePolicy", + "lex:DescribeSlot", + "lex:DescribeSlotType", + "lex:Get*", + "lex:ListBotAliases", + "lex:ListBotAliasReplicas", + "lex:ListBotChannels", + "lex:ListBotLocales", + "lex:ListBotReplicas", + "lex:ListBots", + "lex:ListBotVersionReplicas", + "lex:ListBotVersions", + "lex:ListBuiltInIntents", + "lex:ListBuiltInSlotTypes", + "lex:ListExports", + "lex:ListImports", + "lex:ListIntents", + "lex:ListSlots", + "lex:ListSlotTypes", + "lex:ListTagsForResource", + "license-manager:Get*", + "license-manager:List*", + "lightsail:GetActiveNames", + "lightsail:GetAlarms", + "lightsail:GetAutoSnapshots", + "lightsail:GetBlueprints", + "lightsail:GetBucketAccessKeys", + "lightsail:GetBucketBundles", + "lightsail:GetBucketMetricData", + "lightsail:GetBuckets", + "lightsail:GetBundles", + "lightsail:GetCertificates", + "lightsail:GetCloudFormationStackRecords", + "lightsail:GetContainerAPIMetadata", + "lightsail:GetContainerImages", + "lightsail:GetContainerServiceDeployments", + "lightsail:GetContainerServiceMetricData", + "lightsail:GetContainerServicePowers", + "lightsail:GetContainerServices", + "lightsail:GetDisk", + "lightsail:GetDisks", + "lightsail:GetDiskSnapshot", + "lightsail:GetDiskSnapshots", + "lightsail:GetDistributionBundles", + "lightsail:GetDistributionLatestCacheReset", + "lightsail:GetDistributionMetricData", + "lightsail:GetDistributions", + "lightsail:GetDomain", + "lightsail:GetDomains", + "lightsail:GetExportSnapshotRecords", + "lightsail:GetInstance", + "lightsail:GetInstanceMetricData", + "lightsail:GetInstancePortStates", + "lightsail:GetInstances", + "lightsail:GetInstanceSnapshot", + "lightsail:GetInstanceSnapshots", + "lightsail:GetInstanceState", + "lightsail:GetKeyPair", + "lightsail:GetKeyPairs", + "lightsail:GetLoadBalancer", + "lightsail:GetLoadBalancerMetricData", + "lightsail:GetLoadBalancers", + "lightsail:GetLoadBalancerTlsCertificates", + "lightsail:GetOperation", + "lightsail:GetOperations", + "lightsail:GetOperationsForResource", + "lightsail:GetRegions", + "lightsail:GetRelationalDatabase", + "lightsail:GetRelationalDatabaseBlueprints", + "lightsail:GetRelationalDatabaseBundles", + "lightsail:GetRelationalDatabaseEvents", + "lightsail:GetRelationalDatabaseLogEvents", + "lightsail:GetRelationalDatabaseLogStreams", + "lightsail:GetRelationalDatabaseMetricData", + "lightsail:GetRelationalDatabaseParameters", + "lightsail:GetRelationalDatabases", + "lightsail:GetRelationalDatabaseSnapshot", + "lightsail:GetRelationalDatabaseSnapshots", + "lightsail:GetStaticIp", + "lightsail:GetStaticIps", + "lightsail:Is*", + "logs:Describe*", + "logs:FilterLogEvents", + "logs:Get*", + "logs:ListIntegrations", + "logs:ListAnomalies", + "logs:ListEntitiesForLogGroup", + "logs:ListLogAnomalyDetectors", + "logs:ListLogDeliveries", + "logs:ListLogGroupsForEntity", + "logs:ListLogGroupsForQuery", + "logs:ListTagsForResource", + "logs:ListTagsLogGroup", + "logs:StartLiveTail", + "logs:StartQuery", + "logs:StopLiveTail", + "logs:StopQuery", + "logs:TestMetricFilter", + "lookoutequipment:DescribeDataIngestionJob", + "lookoutequipment:DescribeDataset", + "lookoutequipment:DescribeInferenceScheduler", + "lookoutequipment:DescribeLabel", + "lookoutequipment:DescribeLabelGroup", + "lookoutequipment:DescribeModel", + "lookoutequipment:DescribeModelVersion", + "lookoutequipment:DescribeResourcePolicy", + "lookoutequipment:DescribeRetrainingScheduler", + "lookoutequipment:ListDataIngestionJobs", + "lookoutequipment:ListDatasets", + "lookoutequipment:ListInferenceEvents", + "lookoutequipment:ListInferenceExecutions", + "lookoutequipment:ListInferenceSchedulers", + "lookoutequipment:ListLabelGroups", + "lookoutequipment:ListLabels", + "lookoutequipment:ListModels", + "lookoutequipment:ListModelVersions", + "lookoutequipment:ListRetrainingSchedulers", + "lookoutequipment:ListSensorStatistics", + "lookoutequipment:ListTagsForResource", + "lookoutmetrics:Describe*", + "lookoutmetrics:Get*", + "lookoutmetrics:List*", + "lookoutvision:DescribeDataset", + "lookoutvision:DescribeModel", + "lookoutvision:DescribeModelPackagingJob", + "lookoutvision:DescribeProject", + "lookoutvision:ListDatasetEntries", + "lookoutvision:ListModelPackagingJobs", + "lookoutvision:ListModels", + "lookoutvision:ListProjects", + "lookoutvision:ListTagsForResource", + "m2:GetApplication", + "m2:GetApplicationVersion", + "m2:GetBatchJobExecution", + "m2:GetDataSetDetails", + "m2:GetDataSetImportTask", + "m2:GetDeployment", + "m2:GetEnvironment", + "m2:ListApplications", + "m2:ListApplicationVersions", + "m2:ListBatchJobDefinitions", + "m2:ListBatchJobExecutions", + "m2:ListDataSetImportHistory", + "m2:ListDataSets", + "m2:ListDeployments", + "m2:ListEngineVersions", + "m2:ListEnvironments", + "m2:ListTagsForResource", + "machinelearning:Describe*", + "machinelearning:Get*", + "macie2:BatchGetCustomDataIdentifiers", + "macie2:DescribeBuckets", + "macie2:DescribeClassificationJob", + "macie2:DescribeOrganizationConfiguration", + "macie2:GetAdministratorAccount", + "macie2:GetAllowList", + "macie2:GetAutomatedDiscoveryConfiguration", + "macie2:GetBucketStatistics", + "macie2:GetClassificationExportConfiguration", + "macie2:GetClassificationScope", + "macie2:GetCustomDataIdentifier", + "macie2:GetFindings", + "macie2:GetFindingsFilter", + "macie2:GetFindingsPublicationConfiguration", + "macie2:GetFindingStatistics", + "macie2:GetInvitationsCount", + "macie2:GetMacieSession", + "macie2:GetMember", + "macie2:GetResourceProfile", + "macie2:GetRevealConfiguration", + "macie2:GetSensitiveDataOccurrencesAvailability", + "macie2:GetSensitivityInspectionTemplate", + "macie2:GetUsageStatistics", + "macie2:GetUsageTotals", + "macie2:ListAllowLists", + "macie2:ListAutomatedDiscoveryAccounts", + "macie2:ListClassificationJobs", + "macie2:ListClassificationScopes", + "macie2:ListCustomDataIdentifiers", + "macie2:ListFindings", + "macie2:ListFindingsFilters", + "macie2:ListInvitations", + "macie2:ListMembers", + "macie2:ListOrganizationAdminAccounts", + "macie2:ListResourceProfileArtifacts", + "macie2:ListResourceProfileDetections", + "macie2:ListSensitivityInspectionTemplates", + "macie2:ListTagsForResource", + "macie2:SearchResources", + "managedblockchain:GetMember", + "managedblockchain:GetNetwork", + "managedblockchain:GetNode", + "managedblockchain:GetProposal", + "managedblockchain:ListInvitations", + "managedblockchain:ListMembers", + "managedblockchain:ListNetworks", + "managedblockchain:ListNodes", + "managedblockchain:ListProposals", + "managedblockchain:ListProposalVotes", + "managedblockchain:ListTagsForResource", + "mediaconnect:DescribeFlow", + "mediaconnect:DescribeOffering", + "mediaconnect:DescribeReservation", + "mediaconnect:ListEntitlements", + "mediaconnect:ListFlows", + "mediaconnect:ListOfferings", + "mediaconnect:ListReservations", + "mediaconnect:ListTagsForResource", + "mediaconvert:DescribeEndpoints", + "mediaconvert:Get*", + "mediaconvert:List*", + "medialive:DescribeChannel", + "medialive:DescribeInput", + "medialive:DescribeInputDevice", + "medialive:DescribeInputDeviceThumbnail", + "medialive:DescribeInputSecurityGroup", + "medialive:DescribeMultiplex", + "medialive:DescribeMultiplexProgram", + "medialive:DescribeOffering", + "medialive:DescribeReservation", + "medialive:DescribeSchedule", + "medialive:GetCloudWatchAlarmTemplate", + "medialive:GetCloudWatchAlarmTemplateGroup", + "medialive:GetEventBridgeRuleTemplate", + "medialive:GetEventBridgeRuleTemplateGroup", + "medialive:GetSignalMap", + "medialive:ListChannels", + "medialive:ListCloudWatchAlarmTemplateGroups", + "medialive:ListCloudWatchAlarmTemplates", + "medialive:ListEventBridgeRuleTemplateGroups", + "medialive:ListEventBridgeRuleTemplates", + "medialive:ListInputDevices", + "medialive:ListInputDeviceTransfers", + "medialive:ListInputs", + "medialive:ListInputSecurityGroups", + "medialive:ListMultiplexes", + "medialive:ListMultiplexPrograms", + "medialive:ListOfferings", + "medialive:ListReservations", + "medialive:ListSignalMaps", + "medialive:ListTagsForResource", + "mediapackage-vod:Describe*", + "mediapackage-vod:List*", + "mediapackage:Describe*", + "mediapackage:List*", + "mediapackagev2:GetChannel", + "mediapackagev2:GetChannelGroup", + "mediapackagev2:GetChannelPolicy", + "mediapackagev2:GetHeadObject", + "mediapackagev2:GetObject", + "mediapackagev2:GetOriginEndpoint", + "mediapackagev2:GetOriginEndpointPolicy", + "mediapackagev2:ListChannelGroups", + "mediapackagev2:ListChannels", + "mediapackagev2:ListOriginEndpoints", + "mediapackagev2:ListTagsForResource", + "mediastore:DescribeContainer", + "mediastore:DescribeObject", + "mediastore:GetContainerPolicy", + "mediastore:GetCorsPolicy", + "mediastore:GetLifecyclePolicy", + "mediastore:GetMetricPolicy", + "mediastore:GetObject", + "mediastore:ListContainers", + "mediastore:ListItems", + "mediastore:ListTagsForResource", + "memorydb:DescribeClusters", + "memorydb:DescribeParameterGroups", + "memorydb:DescribeParameters", + "memorydb:ListTags", + "mgh:Describe*", + "mgh:GetHomeRegion", + "mgh:List*", + "mgn:DescribeJobLogItems", + "mgn:DescribeJobs", + "mgn:DescribeLaunchConfigurationTemplates", + "mgn:DescribeReplicationConfigurationTemplates", + "mgn:DescribeSourceServers", + "mgn:DescribeVcenterClients", + "mgn:GetLaunchConfiguration", + "mgn:GetReplicationConfiguration", + "mgn:ListApplications", + "mgn:ListSourceServerActions", + "mgn:ListTemplateActions", + "mgn:ListWaves", + "mobileanalytics:Get*", + "mobiletargeting:Get*", + "mobiletargeting:List*", + "monitron:GetProject", + "monitron:GetProjectAdminUser", + "monitron:ListProjects", + "monitron:ListTagsForResource", + "mq:Describe*", + "mq:List*", + "network-firewall:DescribeFirewall", + "network-firewall:DescribeFirewallPolicy", + "network-firewall:DescribeLoggingConfiguration", + "network-firewall:DescribeResourcePolicy", + "network-firewall:DescribeRuleGroup", + "network-firewall:DescribeRuleGroupMetadata", + "network-firewall:DescribeTLSInspectionConfiguration", + "network-firewall:ListFirewallPolicies", + "network-firewall:ListFirewalls", + "network-firewall:ListRuleGroups", + "network-firewall:ListTagsForResource", + "network-firewall:ListTLSInspectionConfigurations", + "networkmanager:DescribeGlobalNetworks", + "networkmanager:GetConnectAttachment", + "networkmanager:GetConnections", + "networkmanager:GetConnectPeer", + "networkmanager:GetConnectPeerAssociations", + "networkmanager:GetCoreNetwork", + "networkmanager:GetCoreNetworkChangeEvents", + "networkmanager:GetCoreNetworkChangeSet", + "networkmanager:GetCoreNetworkPolicy", + "networkmanager:GetCustomerGatewayAssociations", + "networkmanager:GetDevices", + "networkmanager:GetLinkAssociations", + "networkmanager:GetLinks", + "networkmanager:GetNetworkResourceCounts", + "networkmanager:GetNetworkResourceRelationships", + "networkmanager:GetNetworkResources", + "networkmanager:GetNetworkRoutes", + "networkmanager:GetNetworkTelemetry", + "networkmanager:GetResourcePolicy", + "networkmanager:GetRouteAnalysis", + "networkmanager:GetSites", + "networkmanager:GetSiteToSiteVpnAttachment", + "networkmanager:GetTransitGatewayConnectPeerAssociations", + "networkmanager:GetTransitGatewayPeering", + "networkmanager:GetTransitGatewayRegistrations", + "networkmanager:GetTransitGatewayRouteTableAttachment", + "networkmanager:GetVpcAttachment", + "networkmanager:ListAttachments", + "networkmanager:ListConnectPeers", + "networkmanager:ListCoreNetworkPolicyVersions", + "networkmanager:ListCoreNetworks", + "networkmanager:ListPeerings", + "networkmanager:ListTagsForResource", + "nimble:GetEula", + "nimble:GetFeatureMap", + "nimble:GetLaunchProfile", + "nimble:GetLaunchProfileDetails", + "nimble:GetLaunchProfileInitialization", + "nimble:GetLaunchProfileMember", + "nimble:GetStreamingImage", + "nimble:GetStreamingSession", + "nimble:GetStudio", + "nimble:GetStudioComponent", + "nimble:GetStudioMember", + "nimble:ListEulaAcceptances", + "nimble:ListEulas", + "nimble:ListLaunchProfileMembers", + "nimble:ListLaunchProfiles", + "nimble:ListStreamingImages", + "nimble:ListStreamingSessions", + "nimble:ListStudioComponents", + "nimble:ListStudioMembers", + "nimble:ListStudios", + "nimble:ListTagsForResource", + "notifications-contacts:GetEmailContact", + "notifications-contacts:ListEmailContacts", + "notifications-contacts:ListTagsForResource", + "notifications:GetEventRule", + "notifications:GetNotificationConfiguration", + "notifications:GetNotificationEvent", + "notifications:ListChannels", + "notifications:ListEventRules", + "notifications:ListNotificationConfigurations", + "notifications:ListNotificationEvents", + "notifications:ListNotificationHubs", + "notifications:ListTagsForResource", + "oam:GetLink", + "oam:GetSink", + "oam:GetSinkPolicy", + "oam:ListAttachedLinks", + "oam:ListLinks", + "oam:ListSinks", + "observabilityadmin:GetTelemetryEvaluationStatus", + "observabilityadmin:GetTelemetryEvaluationStatusForOrganization", + "observabilityadmin:ListResourceTelemetry", + "observabilityadmin:ListResourceTelemetryForOrganization", + "omics:Get*", + "omics:List*", + "one:GetDeviceConfigurationTemplate", + "one:GetDeviceInstance", + "one:GetDeviceInstanceConfiguration", + "one:GetSite", + "one:GetSiteAddress", + "one:ListDeviceConfigurationTemplates", + "one:ListDeviceInstances", + "one:ListSites", + "one:ListUsers", + "opsworks-cm:Describe*", + "opsworks-cm:List*", + "opsworks:Describe*", + "opsworks:Get*", + "organizations:Describe*", + "organizations:List*", + "osis:GetPipeline", + "osis:GetPipelineBlueprint", + "osis:GetPipelineChangeProgress", + "osis:ListPipelineBlueprints", + "osis:ListPipelines", + "osis:ListTagsForResource", + "outposts:Get*", + "outposts:List*", + "payment-cryptography:GetAlias", + "payment-cryptography:GetKey", + "payment-cryptography:GetPublicKeyCertificate", + "payment-cryptography:ListAliases", + "payment-cryptography:ListKeys", + "payment-cryptography:ListTagsForResource", + "payments:GetPaymentInstrument", + "payments:GetPaymentStatus", + "payments:ListPaymentInstruments", + "payments:ListPaymentPreferences", + "payments:ListPaymentProgramOptions", + "payments:ListPaymentProgramStatus", + "payments:ListTagsForResource", + "pca-connector-ad:GetConnector", + "pca-connector-ad:GetDirectoryRegistration", + "pca-connector-ad:GetServicePrincipalName", + "pca-connector-ad:GetTemplate", + "pca-connector-ad:GetTemplateGroupAccessControlEntry", + "pca-connector-ad:ListConnectors", + "pca-connector-ad:ListDirectoryRegistrations", + "pca-connector-ad:ListServicePrincipalNames", + "pca-connector-ad:ListTagsForResource", + "pca-connector-ad:ListTemplateGroupAccessControlEntries", + "pca-connector-ad:ListTemplates", + "pca-connector-scep:GetChallengeMetadata", + "pca-connector-scep:GetConnector", + "pca-connector-scep:ListChallengeMetadata", + "pca-connector-scep:ListConnectors", + "pca-connector-scep:ListTagsForResource", + "pcs:GetCluster", + "pcs:GetComputeNodeGroup", + "pcs:GetQueue", + "pcs:ListClusters", + "pcs:ListComputeNodeGroups", + "pcs:ListQueues", + "pcs:ListTagsForResource", + "personalize:Describe*", + "personalize:Get*", + "personalize:List*", + "pi:DescribeDimensionKeys", + "pi:GetDimensionKeyDetails", + "pi:GetResourceMetadata", + "pi:GetResourceMetrics", + "pi:ListAvailableResourceDimensions", + "pi:ListAvailableResourceMetrics", + "pipes:DescribePipe", + "pipes:ListPipes", + "pipes:ListTagsForResource", + "polly:Describe*", + "polly:Get*", + "polly:List*", + "polly:SynthesizeSpeech", + "pricing:DescribeServices", + "pricing:GetAttributeValues", + "pricing:GetPriceListFileUrl", + "pricing:GetProducts", + "pricing:ListPriceLists", + "proton:GetDeployment", + "proton:GetEnvironment", + "proton:GetEnvironmentTemplate", + "proton:GetEnvironmentTemplateVersion", + "proton:GetService", + "proton:GetServiceInstance", + "proton:GetServiceTemplate", + "proton:GetServiceTemplateVersion", + "proton:ListDeployments", + "proton:ListEnvironmentAccountConnections", + "proton:ListEnvironments", + "proton:ListEnvironmentTemplates", + "proton:ListServiceInstances", + "proton:ListServices", + "proton:ListServiceTemplates", + "proton:ListTagsForResource", + "purchase-orders:GetPurchaseOrder", + "purchase-orders:ListPurchaseOrderInvoices", + "purchase-orders:ListPurchaseOrders", + "purchase-orders:ViewPurchaseOrders", + "qbusiness:GetApplication", + "qbusiness:GetChatControlsConfiguration", + "qbusiness:GetDataSource", + "qbusiness:GetGroup", + "qbusiness:GetIndex", + "qbusiness:GetPlugin", + "qbusiness:GetRetriever", + "qbusiness:GetUser", + "qbusiness:GetWebExperience", + "qbusiness:ListApplications", + "qbusiness:ListDataSources", + "qbusiness:ListDataSourceSyncJobs", + "qbusiness:ListGroups", + "qbusiness:ListIndices", + "qbusiness:ListPlugins", + "qbusiness:ListRetrievers", + "qbusiness:ListSubscriptions", + "qbusiness:ListTagsForResource", + "qbusiness:ListWebExperiences", + "qldb:DescribeJournalKinesisStream", + "qldb:DescribeJournalS3Export", + "qldb:DescribeLedger", + "qldb:GetBlock", + "qldb:GetDigest", + "qldb:GetRevision", + "qldb:ListJournalKinesisStreamsForLedger", + "qldb:ListJournalS3Exports", + "qldb:ListJournalS3ExportsForLedger", + "qldb:ListLedgers", + "qldb:ListTagsForResource", + "ram:Get*", + "ram:List*", + "rbin:GetRule", + "rbin:ListRules", + "rbin:ListTagsForResource", + "rds:Describe*", + "rds:Download*", + "rds:List*", + "redshift-serverless:GetCustomDomainAssociation", + "redshift-serverless:GetEndpointAccess", + "redshift-serverless:GetNamespace", + "redshift-serverless:GetRecoveryPoint", + "redshift-serverless:GetResourcePolicy", + "redshift-serverless:GetScheduledAction", + "redshift-serverless:GetSnapshot", + "redshift-serverless:GetTableRestoreStatus", + "redshift-serverless:GetUsageLimit", + "redshift-serverless:GetWorkgroup", + "redshift-serverless:ListCustomDomainAssociations", + "redshift-serverless:ListEndpointAccess", + "redshift-serverless:ListNamespaces", + "redshift-serverless:ListRecoveryPoints", + "redshift-serverless:ListScheduledActions", + "redshift-serverless:ListSnapshotCopyConfigurations", + "redshift-serverless:ListSnapshots", + "redshift-serverless:ListTableRestoreStatus", + "redshift-serverless:ListTagsForResource", + "redshift-serverless:ListUsageLimits", + "redshift-serverless:ListWorkgroups", + "redshift:Describe*", + "redshift:GetReservedNodeExchangeOfferings", + "redshift:ListRecommendations", + "redshift:View*", + "refactor-spaces:GetApplication", + "refactor-spaces:GetEnvironment", + "refactor-spaces:GetResourcePolicy", + "refactor-spaces:GetRoute", + "refactor-spaces:GetService", + "refactor-spaces:ListApplications", + "refactor-spaces:ListEnvironments", + "refactor-spaces:ListEnvironmentVpcs", + "refactor-spaces:ListRoutes", + "refactor-spaces:ListServices", + "refactor-spaces:ListTagsForResource", + "rekognition:CompareFaces", + "rekognition:DescribeDataset", + "rekognition:DescribeProjects", + "rekognition:DescribeProjectVersions", + "rekognition:DescribeStreamProcessor", + "rekognition:Detect*", + "rekognition:GetCelebrityInfo", + "rekognition:GetCelebrityRecognition", + "rekognition:GetContentModeration", + "rekognition:GetFaceDetection", + "rekognition:GetFaceSearch", + "rekognition:GetLabelDetection", + "rekognition:GetPersonTracking", + "rekognition:GetSegmentDetection", + "rekognition:GetTextDetection", + "rekognition:List*", + "rekognition:RecognizeCelebrities", + "rekognition:Search*", + "resiliencehub:DescribeApp", + "resiliencehub:DescribeAppAssessment", + "resiliencehub:DescribeAppVersion", + "resiliencehub:DescribeAppVersionAppComponent", + "resiliencehub:DescribeAppVersionResource", + "resiliencehub:DescribeAppVersionResourcesResolutionStatus", + "resiliencehub:DescribeAppVersionTemplate", + "resiliencehub:DescribeDraftAppVersionResourcesImportStatus", + "resiliencehub:DescribeMetricsExport", + "resiliencehub:DescribeResiliencyPolicy", + "resiliencehub:DescribeResourceGroupingRecommendationTask", + "resiliencehub:ListAlarmRecommendations", + "resiliencehub:ListAppAssessmentComplianceDrifts", + "resiliencehub:ListAppAssessmentResourceDrifts", + "resiliencehub:ListAppAssessments", + "resiliencehub:ListAppComponentCompliances", + "resiliencehub:ListAppComponentRecommendations", + "resiliencehub:ListAppInputSources", + "resiliencehub:ListApps", + "resiliencehub:ListAppVersionAppComponents", + "resiliencehub:ListAppVersionResourceMappings", + "resiliencehub:ListAppVersionResources", + "resiliencehub:ListAppVersions", + "resiliencehub:ListMetrics", + "resiliencehub:ListRecommendationTemplates", + "resiliencehub:ListResiliencyPolicies", + "resiliencehub:ListResourceGroupingRecommendations", + "resiliencehub:ListSopRecommendations", + "resiliencehub:ListSuggestedResiliencyPolicies", + "resiliencehub:ListTagsForResource", + "resiliencehub:ListTestRecommendations", + "resiliencehub:ListUnsupportedAppVersionResources", + "resource-explorer-2:BatchGetView", + "resource-explorer-2:GetDefaultView", + "resource-explorer-2:GetIndex", + "resource-explorer-2:GetView", + "resource-explorer-2:ListIndexes", + "resource-explorer-2:ListSupportedResourceTypes", + "resource-explorer-2:ListTagsForResource", + "resource-explorer-2:ListViews", + "resource-explorer-2:Search", + "resource-groups:Get*", + "resource-groups:List*", + "resource-groups:Search*", + "robomaker:BatchDescribe*", + "robomaker:Describe*", + "robomaker:Get*", + "robomaker:List*", + "route53-recovery-cluster:Get*", + "route53-recovery-cluster:ListRoutingControls", + "route53-recovery-control-config:Describe*", + "route53-recovery-control-config:GetResourcePolicy", + "route53-recovery-control-config:List*", + "route53-recovery-readiness:Get*", + "route53-recovery-readiness:List*", + "route53:Get*", + "route53:List*", + "route53:Test*", + "route53domains:Check*", + "route53domains:Get*", + "route53domains:List*", + "route53domains:View*", + "route53profiles:GetProfile", + "route53profiles:GetProfileAssociation", + "route53profiles:GetProfileResourceAssociation", + "route53profiles:ListProfileAssociations", + "route53profiles:ListProfileResourceAssociations", + "route53profiles:ListProfiles", + "route53profiles:ListTagsForResource", + "route53resolver:Get*", + "route53resolver:List*", + "rum:GetAppMonitor", + "rum:GetAppMonitorData", + "rum:ListAppMonitors", + "s3-object-lambda:GetObject", + "s3-object-lambda:GetObjectAcl", + "s3-object-lambda:GetObjectLegalHold", + "s3-object-lambda:GetObjectRetention", + "s3-object-lambda:GetObjectTagging", + "s3-object-lambda:GetObjectVersion", + "s3-object-lambda:GetObjectVersionAcl", + "s3-object-lambda:GetObjectVersionTagging", + "s3-object-lambda:ListBucket", + "s3-object-lambda:ListBucketMultipartUploads", + "s3-object-lambda:ListBucketVersions", + "s3-object-lambda:ListMultipartUploadParts", + "s3-outposts:GetAccessPoint", + "s3-outposts:GetAccessPointPolicy", + "s3-outposts:GetBucket", + "s3-outposts:GetBucketPolicy", + "s3-outposts:GetBucketTagging", + "s3-outposts:GetBucketVersioning", + "s3-outposts:GetLifecycleConfiguration", + "s3-outposts:GetObject", + "s3-outposts:GetObjectTagging", + "s3-outposts:GetObjectVersion", + "s3-outposts:GetObjectVersionForReplication", + "s3-outposts:GetObjectVersionTagging", + "s3-outposts:GetReplicationConfiguration", + "s3-outposts:ListAccessPoints", + "s3-outposts:ListBucket", + "s3-outposts:ListBucketMultipartUploads", + "s3-outposts:ListBucketVersions", + "s3-outposts:ListEndpoints", + "s3-outposts:ListMultipartUploadParts", + "s3-outposts:ListOutpostsWithS3", + "s3-outposts:ListRegionalBuckets", + "s3-outposts:ListSharedEndpoints", + "s3:DescribeJob", + "s3:Get*", + "s3:List*", + "sagemaker-groundtruth-synthetic:GetAccountDetails", + "sagemaker-groundtruth-synthetic:GetBatch", + "sagemaker-groundtruth-synthetic:GetProject", + "sagemaker-groundtruth-synthetic:ListBatchDataTransfers", + "sagemaker-groundtruth-synthetic:ListBatchSummaries", + "sagemaker-groundtruth-synthetic:ListProjectDataTransfers", + "sagemaker-groundtruth-synthetic:ListProjectSummaries", + "sagemaker:Describe*", + "sagemaker:GetSearchSuggestions", + "sagemaker:List*", + "sagemaker:Search", + "savingsplans:DescribeSavingsPlanRates", + "savingsplans:DescribeSavingsPlans", + "savingsplans:DescribeSavingsPlansOfferingRates", + "savingsplans:DescribeSavingsPlansOfferings", + "savingsplans:ListTagsForResource", + "scheduler:GetSchedule", + "scheduler:GetScheduleGroup", + "scheduler:ListScheduleGroups", + "scheduler:ListSchedules", + "scheduler:ListTagsForResource", + "schemas:Describe*", + "schemas:Get*", + "schemas:List*", + "schemas:Search*", + "sdb:Get*", + "sdb:List*", + "sdb:Select*", + "secretsmanager:Describe*", + "secretsmanager:GetResourcePolicy", + "secretsmanager:List*", + "securityhub:BatchGetAutomationRules", + "securityhub:BatchGetConfigurationPolicyAssociations", + "securityhub:BatchGetControlEvaluations", + "securityhub:BatchGetSecurityControls", + "securityhub:BatchGetStandardsControlAssociations", + "securityhub:Describe*", + "securityhub:Get*", + "securityhub:List*", + "securitylake:GetDataLakeExceptionSubscription", + "securitylake:GetDataLakeOrganizationConfiguration", + "securitylake:GetDataLakeSources", + "securitylake:GetSubscriber", + "securitylake:ListDataLakeExceptions", + "securitylake:ListDataLakes", + "securitylake:ListLogSources", + "securitylake:ListSubscribers", + "securitylake:ListTagsForResource", + "serverlessrepo:Get*", + "serverlessrepo:List*", + "serverlessrepo:SearchApplications", + "servicecatalog:Describe*", + "servicecatalog:GetApplication", + "servicecatalog:GetAttributeGroup", + "servicecatalog:List*", + "servicecatalog:Scan*", + "servicecatalog:Search*", + "servicediscovery:DiscoverInstances", + "servicediscovery:DiscoverInstancesRevision", + "servicediscovery:Get*", + "servicediscovery:List*", + "servicequotas:GetAssociationForServiceQuotaTemplate", + "servicequotas:GetAWSDefaultServiceQuota", + "servicequotas:GetRequestedServiceQuotaChange", + "servicequotas:GetServiceQuota", + "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", + "servicequotas:ListAWSDefaultServiceQuotas", + "servicequotas:ListRequestedServiceQuotaChangeHistory", + "servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota", + "servicequotas:ListServiceQuotaIncreaseRequestsInTemplate", + "servicequotas:ListServiceQuotas", + "servicequotas:ListServices", + "ses:BatchGetMetricData", + "ses:Describe*", + "ses:Get*", + "ses:List*", + "shield:Describe*", + "shield:Get*", + "shield:List*", + "signer:DescribeSigningJob", + "signer:GetSigningPlatform", + "signer:GetSigningProfile", + "signer:ListProfilePermissions", + "signer:ListSigningJobs", + "signer:ListSigningPlatforms", + "signer:ListSigningProfiles", + "signer:ListTagsForResource", + "signin:ListTrustedIdentityPropagationApplicationsForConsole", + "sms-voice:DescribeAccountAttributes", + "sms-voice:DescribeAccountLimits", + "sms-voice:DescribeConfigurationSets", + "sms-voice:DescribeKeywords", + "sms-voice:DescribeOptedOutNumbers", + "sms-voice:DescribeOptOutLists", + "sms-voice:DescribePhoneNumbers", + "sms-voice:DescribePools", + "sms-voice:DescribeSenderIds", + "sms-voice:DescribeSpendLimits", + "sms-voice:ListPoolOriginationIdentities", + "sms-voice:ListTagsForResource", + "snowball:Describe*", + "snowball:Get*", + "snowball:List*", + "sns:Check*", + "sns:Get*", + "sns:List*", + "sqs:Get*", + "sqs:List*", + "sqs:Receive*", + "ssm-contacts:DescribeEngagement", + "ssm-contacts:DescribePage", + "ssm-contacts:GetContact", + "ssm-contacts:GetContactChannel", + "ssm-contacts:ListContactChannels", + "ssm-contacts:ListContacts", + "ssm-contacts:ListEngagements", + "ssm-contacts:ListPageReceipts", + "ssm-contacts:ListPagesByContact", + "ssm-contacts:ListPagesByEngagement", + "ssm-incidents:GetIncidentRecord", + "ssm-incidents:GetReplicationSet", + "ssm-incidents:GetResourcePolicies", + "ssm-incidents:GetResponsePlan", + "ssm-incidents:GetTimelineEvent", + "ssm-incidents:ListIncidentRecords", + "ssm-incidents:ListRelatedItems", + "ssm-incidents:ListReplicationSets", + "ssm-incidents:ListResponsePlans", + "ssm-incidents:ListTagsForResource", + "ssm-incidents:ListTimelineEvents", + "ssm-sap:GetApplication", + "ssm-sap:GetComponent", + "ssm-sap:GetDatabase", + "ssm-sap:GetOperation", + "ssm-sap:GetResourcePermission", + "ssm-sap:ListApplications", + "ssm-sap:ListComponents", + "ssm-sap:ListDatabases", + "ssm-sap:ListOperationEvents", + "ssm-sap:ListOperations", + "ssm-sap:ListTagsForResource", + "ssm:Describe*", + "ssm:Get*", + "ssm:List*", + "sso-directory:Describe*", + "sso-directory:List*", + "sso-directory:Search*", + "sso:Describe*", + "sso:Get*", + "sso:List*", + "sso:Search*", + "states:Describe*", + "states:GetExecutionHistory", + "states:List*", + "states:ValidateStateMachineDefinition", + "storagegateway:Describe*", + "storagegateway:List*", + "sts:GetAccessKeyInfo", + "sts:GetCallerIdentity", + "sts:GetSessionToken", + "support:DescribeAttachment", + "support:DescribeCases", + "support:DescribeCommunications", + "support:DescribeServices", + "support:DescribeSeverityLevels", + "support:DescribeTrustedAdvisorCheckRefreshStatuses", + "support:DescribeTrustedAdvisorCheckResult", + "support:DescribeTrustedAdvisorChecks", + "support:DescribeTrustedAdvisorCheckSummaries", + "supportplans:GetSupportPlan", + "supportplans:GetSupportPlanUpdateStatus", + "supportplans:ListSupportPlanModifiers", + "sustainability:GetCarbonFootprintSummary", + "swf:Count*", + "swf:Describe*", + "swf:Get*", + "swf:List*", + "synthetics:Describe*", + "synthetics:Get*", + "synthetics:List*", + "tag:DescribeReportCreation", + "tag:Get*", + "tax:GetExemptions", + "tax:GetTaxInheritance", + "tax:GetTaxInterview", + "tax:GetTaxRegistration", + "tax:GetTaxRegistrationDocument", + "tax:ListTaxRegistrations", + "timestream:DescribeBatchLoadTask", + "timestream:DescribeDatabase", + "timestream:DescribeEndpoints", + "timestream:DescribeTable", + "timestream:ListBatchLoadTasks", + "timestream:ListDatabases", + "timestream:ListMeasures", + "timestream:ListTables", + "timestream:ListTagsForResource", + "tnb:GetSolFunctionInstance", + "tnb:GetSolFunctionPackage", + "tnb:GetSolFunctionPackageContent", + "tnb:GetSolFunctionPackageDescriptor", + "tnb:GetSolNetworkInstance", + "tnb:GetSolNetworkOperation", + "tnb:GetSolNetworkPackage", + "tnb:GetSolNetworkPackageContent", + "tnb:GetSolNetworkPackageDescriptor", + "tnb:ListSolFunctionInstances", + "tnb:ListSolFunctionPackages", + "tnb:ListSolNetworkInstances", + "tnb:ListSolNetworkOperations", + "tnb:ListSolNetworkPackages", + "tnb:ListTagsForResource", + "transcribe:Get*", + "transcribe:List*", + "transfer:Describe*", + "transfer:List*", + "transfer:TestIdentityProvider", + "translate:DescribeTextTranslationJob", + "translate:GetParallelData", + "translate:GetTerminology", + "translate:ListParallelData", + "translate:ListTerminologies", + "translate:ListTextTranslationJobs", + "trustedadvisor:Describe*", + "trustedadvisor:GetOrganizationRecommendation", + "trustedadvisor:GetRecommendation", + "trustedadvisor:ListChecks", + "trustedadvisor:ListOrganizationRecommendationAccounts", + "trustedadvisor:ListOrganizationRecommendationResources", + "trustedadvisor:ListOrganizationRecommendations", + "trustedadvisor:ListRecommendationResources", + "trustedadvisor:ListRecommendations", + "user-subscriptions:ListApplicationClaims", + "user-subscriptions:ListClaims", + "user-subscriptions:ListUserSubscriptions", + "verifiedpermissions:GetIdentitySource", + "verifiedpermissions:GetPolicy", + "verifiedpermissions:GetPolicyStore", + "verifiedpermissions:GetPolicyTemplate", + "verifiedpermissions:GetSchema", + "verifiedpermissions:IsAuthorized", + "verifiedpermissions:IsAuthorizedWithToken", + "verifiedpermissions:ListIdentitySources", + "verifiedpermissions:ListPolicies", + "verifiedpermissions:ListPolicyStores", + "verifiedpermissions:ListPolicyTemplates", + "vpc-lattice:GetAccessLogSubscription", + "vpc-lattice:GetAuthPolicy", + "vpc-lattice:GetListener", + "vpc-lattice:GetResourcePolicy", + "vpc-lattice:GetRule", + "vpc-lattice:GetService", + "vpc-lattice:GetServiceNetwork", + "vpc-lattice:GetServiceNetworkServiceAssociation", + "vpc-lattice:GetServiceNetworkVpcAssociation", + "vpc-lattice:GetTargetGroup", + "vpc-lattice:ListAccessLogSubscriptions", + "vpc-lattice:ListListeners", + "vpc-lattice:ListRules", + "vpc-lattice:ListServiceNetworks", + "vpc-lattice:ListServiceNetworkServiceAssociations", + "vpc-lattice:ListServiceNetworkVpcAssociations", + "vpc-lattice:ListServices", + "vpc-lattice:ListTagsForResource", + "vpc-lattice:ListTargetGroups", + "vpc-lattice:ListTargets", + "waf-regional:Get*", + "waf-regional:List*", + "waf:Get*", + "waf:List*", + "wafv2:CheckCapacity", + "wafv2:Describe*", + "wafv2:Get*", + "wafv2:List*", + "wellarchitected:ExportLens", + "wellarchitected:GetAnswer", + "wellarchitected:GetConsolidatedReport", + "wellarchitected:GetLens", + "wellarchitected:GetLensReview", + "wellarchitected:GetLensReviewReport", + "wellarchitected:GetLensVersionDifference", + "wellarchitected:GetMilestone", + "wellarchitected:GetProfile", + "wellarchitected:GetProfileTemplate", + "wellarchitected:GetReviewTemplate", + "wellarchitected:GetReviewTemplateAnswer", + "wellarchitected:GetReviewTemplateLensReview", + "wellarchitected:GetWorkload", + "wellarchitected:ListAnswers", + "wellarchitected:ListCheckDetails", + "wellarchitected:ListCheckSummaries", + "wellarchitected:ListLenses", + "wellarchitected:ListLensReviewImprovements", + "wellarchitected:ListLensReviews", + "wellarchitected:ListLensShares", + "wellarchitected:ListMilestones", + "wellarchitected:ListNotifications", + "wellarchitected:ListProfileNotifications", + "wellarchitected:ListProfiles", + "wellarchitected:ListProfileShares", + "wellarchitected:ListReviewTemplateAnswers", + "wellarchitected:ListReviewTemplates", + "wellarchitected:ListShareInvitations", + "wellarchitected:ListTagsForResource", + "wellarchitected:ListTemplateShares", + "wellarchitected:ListWorkloads", + "wellarchitected:ListWorkloadShares", + "workdocs:CheckAlias", + "workdocs:Describe*", + "workdocs:Get*", + "workmail:Describe*", + "workmail:Get*", + "workmail:List*", + "workmail:Search*", + "workspaces-web:GetBrowserSettings", + "workspaces-web:GetIdentityProvider", + "workspaces-web:GetNetworkSettings", + "workspaces-web:GetPortal", + "workspaces-web:GetPortalServiceProviderMetadata", + "workspaces-web:GetTrustStore", + "workspaces-web:GetUserAccessLoggingSettings", + "workspaces-web:GetUserSettings", + "workspaces-web:ListBrowserSettings", + "workspaces-web:ListIdentityProviders", + "workspaces-web:ListNetworkSettings", + "workspaces-web:ListPortals", + "workspaces-web:ListTagsForResource", + "workspaces-web:ListTrustStores", + "workspaces-web:ListUserAccessLoggingSettings", + "workspaces-web:ListUserSettings", + "workspaces:Describe*", + "xray:BatchGet*", + "xray:Get*" + ], + "Resource": "*" + } + ] + } } }, "createdDate": "2015-02-06T18:39:48.000Z", - "lastUpdatedDate": "2024-12-11T18:36:25.000Z" + "lastUpdatedDate": "2024-12-31T03:07:07.000Z" }, "AWSCloudFormationReadOnlyAccess": { "arn": "arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess", @@ -117171,8 +119605,8 @@ }, "SecurityAudit": { "arn": "arn:aws:iam::aws:policy/SecurityAudit", - "latestVersionId": "v47", - "versionsCount": 47, + "latestVersionId": "v48", + "versionsCount": 48, "versions": { "v1": { "createdDate": "2015-02-06T18:41:01.000Z", @@ -118004,8 +120438,119 @@ ] } }, - "v10": { - "createdDate": "2017-03-23T18:50:24.000Z", + "v10": { + "createdDate": "2017-03-23T18:50:24.000Z", + "document": { + "Version": "2012-10-17", + "Statement": [ + { + "Action": [ + "cloudformation:getStackPolicy", + "logs:describeLogGroups", + "logs:describeMetricFilters", + "autoscaling:Describe*", + "cloudformation:DescribeStack*", + "cloudformation:GetTemplate", + "cloudformation:ListStack*", + "cloudfront:Get*", + "cloudfront:List*", + "cloudtrail:DescribeTrails", + "cloudtrail:GetTrailStatus", + "cloudtrail:ListTags", + "cloudwatch:Describe*", + "codecommit:BatchGetRepositories", + "codecommit:GetBranch", + "codecommit:GetObjectIdentifier", + "codecommit:GetRepository", + "codecommit:List*", + "codedeploy:Batch*", + "codedeploy:Get*", + "codedeploy:List*", + "config:Deliver*", + "config:Describe*", + "config:Get*", + "datapipeline:DescribeObjects", + "datapipeline:DescribePipelines", + "datapipeline:EvaluateExpression", + "datapipeline:GetPipelineDefinition", + "datapipeline:ListPipelines", + "datapipeline:QueryObjects", + "datapipeline:ValidatePipelineDefinition", + "directconnect:Describe*", + "dynamodb:ListTables", + "ec2:Describe*", + "ecs:Describe*", + "ecs:List*", + "elasticache:Describe*", + "elasticbeanstalk:Describe*", + "elasticloadbalancing:Describe*", + "elasticmapreduce:DescribeJobFlows", + "elasticmapreduce:ListClusters", + "es:ListDomainNames", + "es:Describe*", + "firehose:Describe*", + "firehose:List*", + "glacier:DescribeVault", + "glacier:GetVaultAccessPolicy", + "glacier:ListVaults", + "iam:GenerateCredentialReport", + "iam:Get*", + "iam:List*", + "kms:Describe*", + "kms:Get*", + "kms:List*", + "lambda:GetPolicy", + "lambda:ListFunctions", + "rds:Describe*", + "rds:DownloadDBLogFilePortion", + "rds:ListTagsForResource", + "redshift:Describe*", + "route53:GetChange", + "route53:GetCheckerIpRanges", + "route53:GetGeoLocation", + "route53:GetHealthCheck", + "route53:GetHealthCheckCount", + "route53:GetHealthCheckLastFailureReason", + "route53:GetHostedZone", + "route53:GetHostedZoneCount", + "route53:GetReusableDelegationSet", + "route53:ListGeoLocations", + "route53:ListHealthChecks", + "route53:ListHostedZones", + "route53:ListHostedZonesByName", + "route53:ListResourceRecordSets", + "route53:ListReusableDelegationSets", + "route53:ListTagsForResource", + "route53:ListTagsForResources", + "route53domains:GetDomainDetail", + "route53domains:GetOperationDetail", + "route53domains:ListDomains", + "route53domains:ListOperations", + "route53domains:ListTagsForDomain", + "s3:GetBucket*", + "s3:GetLifecycleConfiguration", + "s3:GetObjectAcl", + "s3:GetObjectVersionAcl", + "s3:ListAllMyBuckets", + "sdb:DomainMetadata", + "sdb:ListDomains", + "ses:GetIdentityDkimAttributes", + "ses:ListIdentities", + "sns:GetTopicAttributes", + "sns:ListTopics", + "sqs:GetQueueAttributes", + "sqs:ListQueues", + "tag:GetResources", + "tag:GetTagKeys" + ], + "Effect": "Allow", + "Resource": "*" + } + ] + } + }, + "v11": { + "createdDate": "2017-05-31T21:34:02.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -118052,6 +120597,7 @@ "elasticloadbalancing:Describe*", "elasticmapreduce:DescribeJobFlows", "elasticmapreduce:ListClusters", + "elasticmapreduce:ListInstances", "es:ListDomainNames", "es:Describe*", "firehose:Describe*", @@ -118115,13 +120661,15 @@ ] } }, - "v11": { - "createdDate": "2017-05-31T21:34:02.000Z", + "v12": { + "createdDate": "2017-07-12T20:16:44.000Z", "document": { "Version": "2012-10-17", "Statement": [ { "Action": [ + "acm:ListCertificates", + "acm:DescribeCertificate", "cloudformation:getStackPolicy", "logs:describeLogGroups", "logs:describeMetricFilters", @@ -118206,6 +120754,11 @@ "route53domains:ListOperations", "route53domains:ListTagsForDomain", "s3:GetBucket*", + "s3:GetAccelerateConfiguration", + "s3:GetAnalyticsConfiguration", + "s3:GetInventoryConfiguration", + "s3:GetMetricsConfiguration", + "s3:GetReplicationConfiguration", "s3:GetLifecycleConfiguration", "s3:GetObjectAcl", "s3:GetObjectVersionAcl", @@ -118213,8 +120766,10 @@ "sdb:DomainMetadata", "sdb:ListDomains", "ses:GetIdentityDkimAttributes", + "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", "sns:GetTopicAttributes", + "sns:ListSubscriptionsByTopic", "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListQueues", @@ -118227,8 +120782,8 @@ ] } }, - "v12": { - "createdDate": "2017-07-12T20:16:44.000Z", + "v13": { + "createdDate": "2017-10-11T18:36:05.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -118239,6 +120794,7 @@ "cloudformation:getStackPolicy", "logs:describeLogGroups", "logs:describeMetricFilters", + "logs:DescribeResourcePolicies", "autoscaling:Describe*", "cloudformation:DescribeStack*", "cloudformation:GetTemplate", @@ -118348,29 +120904,37 @@ ] } }, - "v13": { - "createdDate": "2017-10-11T18:36:05.000Z", + "v14": { + "createdDate": "2018-01-03T17:58:38.000Z", "document": { "Version": "2012-10-17", "Statement": [ { + "Effect": "Allow", + "Resource": "*", "Action": [ - "acm:ListCertificates", "acm:DescribeCertificate", - "cloudformation:getStackPolicy", - "logs:describeLogGroups", - "logs:describeMetricFilters", - "logs:DescribeResourcePolicies", + "acm:ListCertificates", "autoscaling:Describe*", + "batch:DescribeComputeEnvironments", + "batch:DescribeJobDefinitions", + "clouddirectory:ListDirectories", "cloudformation:DescribeStack*", "cloudformation:GetTemplate", "cloudformation:ListStack*", + "cloudformation:GetStackPolicy", "cloudfront:Get*", "cloudfront:List*", + "cloudhsm:ListHapgs", + "cloudhsm:ListHsms", + "cloudhsm:ListLunaClients", + "cloudsearch:DescribeDomains", + "cloudsearch:DescribeServiceAccessPolicies", "cloudtrail:DescribeTrails", "cloudtrail:GetTrailStatus", "cloudtrail:ListTags", "cloudwatch:Describe*", + "codebuild:ListProjects", "codecommit:BatchGetRepositories", "codecommit:GetBranch", "codecommit:GetObjectIdentifier", @@ -118379,6 +120943,9 @@ "codedeploy:Batch*", "codedeploy:Get*", "codedeploy:List*", + "codepipeline:ListPipelines", + "cognito-identity:ListIdentityPools", + "cognito-idp:ListUserPools", "config:Deliver*", "config:Describe*", "config:Get*", @@ -118390,88 +120957,109 @@ "datapipeline:QueryObjects", "datapipeline:ValidatePipelineDefinition", "directconnect:Describe*", + "ds:DescribeDirectories", + "dynamodb:ListStreams", "dynamodb:ListTables", "ec2:Describe*", + "ecr:DescribeRepositories", + "ecr:GetRepositoryPolicy", "ecs:Describe*", "ecs:List*", "elasticache:Describe*", "elasticbeanstalk:Describe*", + "elasticfilesystem:DescribeFileSystems", "elasticloadbalancing:Describe*", "elasticmapreduce:DescribeJobFlows", "elasticmapreduce:ListClusters", "elasticmapreduce:ListInstances", - "es:ListDomainNames", "es:Describe*", + "es:ListDomainNames", + "events:DescribeEventBus", + "events:ListRules", "firehose:Describe*", "firehose:List*", + "gamelift:ListBuilds", + "gamelift:ListFleets", "glacier:DescribeVault", "glacier:GetVaultAccessPolicy", "glacier:ListVaults", "iam:GenerateCredentialReport", "iam:Get*", "iam:List*", + "iot:ListThings", + "kinesis:ListStreams", + "kinesisanalytics:ListApplications", "kms:Describe*", "kms:Get*", "kms:List*", "lambda:GetPolicy", "lambda:ListFunctions", + "logs:DescribeResourcePolicies", + "logs:DescribeLogGroups", + "logs:DescribeMetricFilters", + "machinelearning:DescribeMLModels", + "opsworks-cm:DescribeServers", "rds:Describe*", "rds:DownloadDBLogFilePortion", "rds:ListTagsForResource", "redshift:Describe*", - "route53:GetChange", - "route53:GetCheckerIpRanges", - "route53:GetGeoLocation", - "route53:GetHealthCheck", - "route53:GetHealthCheckCount", - "route53:GetHealthCheckLastFailureReason", - "route53:GetHostedZone", - "route53:GetHostedZoneCount", - "route53:GetReusableDelegationSet", - "route53:ListGeoLocations", - "route53:ListHealthChecks", - "route53:ListHostedZones", - "route53:ListHostedZonesByName", - "route53:ListResourceRecordSets", - "route53:ListReusableDelegationSets", - "route53:ListTagsForResource", - "route53:ListTagsForResources", + "route53:Get*", + "route53:List*", "route53domains:GetDomainDetail", "route53domains:GetOperationDetail", "route53domains:ListDomains", "route53domains:ListOperations", "route53domains:ListTagsForDomain", - "s3:GetBucket*", "s3:GetAccelerateConfiguration", "s3:GetAnalyticsConfiguration", + "s3:GetBucket*", "s3:GetInventoryConfiguration", - "s3:GetMetricsConfiguration", - "s3:GetReplicationConfiguration", "s3:GetLifecycleConfiguration", + "s3:GetMetricsConfiguration", "s3:GetObjectAcl", "s3:GetObjectVersionAcl", + "s3:GetReplicationConfiguration", "s3:ListAllMyBuckets", "sdb:DomainMetadata", "sdb:ListDomains", "ses:GetIdentityDkimAttributes", "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", + "snowball:ListClusters", + "snowball:ListJobs", "sns:GetTopicAttributes", "sns:ListSubscriptionsByTopic", "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListQueues", + "states:ListStateMachines", + "storagegateway:DescribeBandwidthRateLimit", + "storagegateway:DescribeCache", + "storagegateway:DescribeCachediSCSIVolumes", + "storagegateway:DescribeGatewayInformation", + "storagegateway:DescribeMaintenanceStartTime", + "storagegateway:DescribeNFSFileShares", + "storagegateway:DescribeSnapshotSchedule", + "storagegateway:DescribeStorediSCSIVolumes", + "storagegateway:DescribeTapeArchives", + "storagegateway:DescribeTapeRecoveryPoints", + "storagegateway:DescribeTapes", + "storagegateway:DescribeUploadBuffer", + "storagegateway:DescribeVTLDevices", + "storagegateway:DescribeWorkingStorage", + "storagegateway:List*", "tag:GetResources", - "tag:GetTagKeys" - ], - "Effect": "Allow", - "Resource": "*" + "tag:GetTagKeys", + "trustedadvisor:Describe*", + "waf:ListWebACLs", + "waf-regional:ListWebACLs" + ] } ] } }, - "v14": { - "createdDate": "2018-01-03T17:58:38.000Z", + "v15": { + "createdDate": "2018-01-17T18:46:08.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -118564,6 +121152,8 @@ "logs:DescribeLogGroups", "logs:DescribeMetricFilters", "machinelearning:DescribeMLModels", + "mediastore:GetContainerPolicy", + "mediastore:ListContainers", "opsworks-cm:DescribeServers", "rds:Describe*", "rds:DownloadDBLogFilePortion", @@ -118579,6 +121169,7 @@ "s3:GetAccelerateConfiguration", "s3:GetAnalyticsConfiguration", "s3:GetBucket*", + "s3:GetEncryptionConfiguration", "s3:GetInventoryConfiguration", "s3:GetLifecycleConfiguration", "s3:GetMetricsConfiguration", @@ -118588,6 +121179,8 @@ "s3:ListAllMyBuckets", "sdb:DomainMetadata", "sdb:ListDomains", + "serverlessrepo:GetApplicationPolicy", + "serverlessrepo:ListApplications", "ses:GetIdentityDkimAttributes", "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", @@ -118598,6 +121191,8 @@ "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListQueues", + "ssm:DescribeDocumentPermission", + "ssm:ListDocuments", "states:ListStateMachines", "storagegateway:DescribeBandwidthRateLimit", "storagegateway:DescribeCache", @@ -118624,8 +121219,8 @@ ] } }, - "v15": { - "createdDate": "2018-01-17T18:46:08.000Z", + "v16": { + "createdDate": "2018-02-05T21:51:47.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -118712,6 +121307,7 @@ "kms:Describe*", "kms:Get*", "kms:List*", + "lambda:GetAccountSettings", "lambda:GetPolicy", "lambda:ListFunctions", "logs:DescribeResourcePolicies", @@ -118785,8 +121381,8 @@ ] } }, - "v16": { - "createdDate": "2018-02-05T21:51:47.000Z", + "v17": { + "createdDate": "2018-03-12T20:01:32.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -118876,9 +121472,10 @@ "lambda:GetAccountSettings", "lambda:GetPolicy", "lambda:ListFunctions", - "logs:DescribeResourcePolicies", + "logs:DescribeDestinations", "logs:DescribeLogGroups", "logs:DescribeMetricFilters", + "logs:DescribeResourcePolicies", "machinelearning:DescribeMLModels", "mediastore:GetContainerPolicy", "mediastore:ListContainers", @@ -118947,8 +121544,8 @@ ] } }, - "v17": { - "createdDate": "2018-03-12T20:01:32.000Z", + "v18": { + "createdDate": "2018-05-01T20:06:14.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -118958,6 +121555,7 @@ "Action": [ "acm:DescribeCertificate", "acm:ListCertificates", + "application-autoscaling:Describe*", "autoscaling:Describe*", "batch:DescribeComputeEnvironments", "batch:DescribeJobDefinitions", @@ -119104,14 +121702,15 @@ "tag:GetTagKeys", "trustedadvisor:Describe*", "waf:ListWebACLs", - "waf-regional:ListWebACLs" + "waf-regional:ListWebACLs", + "workspaces:Describe*" ] } ] } }, - "v18": { - "createdDate": "2018-05-01T20:06:14.000Z", + "v19": { + "createdDate": "2018-05-15T18:30:21.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -119193,6 +121792,7 @@ "iam:GenerateCredentialReport", "iam:Get*", "iam:List*", + "iot:DescribeEndpoint", "iot:ListThings", "kinesis:ListStreams", "kinesisanalytics:ListApplications", @@ -119275,8 +121875,8 @@ ] } }, - "v19": { - "createdDate": "2018-05-15T18:30:21.000Z", + "v20": { + "createdDate": "2018-07-30T18:30:09.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -119305,6 +121905,7 @@ "cloudtrail:DescribeTrails", "cloudtrail:GetTrailStatus", "cloudtrail:ListTags", + "cloudtrail:LookupEvents", "cloudwatch:Describe*", "codebuild:ListProjects", "codecommit:BatchGetRepositories", @@ -119355,9 +121956,16 @@ "glacier:DescribeVault", "glacier:GetVaultAccessPolicy", "glacier:ListVaults", + "guardduty:Get*", + "guardduty:List*", "iam:GenerateCredentialReport", "iam:Get*", + "iam:GetAccountAuthorizationDetails", + "iam:GetContextKeysForCustomPolicy", + "iam:GetContextKeysForPrincipalPolicy", "iam:List*", + "iam:SimulateCustomPolicy", + "iam:SimulatePrincipalPolicy", "iot:DescribeEndpoint", "iot:ListThings", "kinesis:ListStreams", @@ -119376,6 +121984,8 @@ "mediastore:GetContainerPolicy", "mediastore:ListContainers", "opsworks-cm:DescribeServers", + "organizations:List*", + "organizations:Describe*", "rds:Describe*", "rds:DownloadDBLogFilePortion", "rds:ListTagsForResource", @@ -119412,7 +122022,7 @@ "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListQueues", - "ssm:DescribeDocumentPermission", + "ssm:Describe*", "ssm:ListDocuments", "states:ListStateMachines", "storagegateway:DescribeBandwidthRateLimit", @@ -119441,8 +122051,8 @@ ] } }, - "v20": { - "createdDate": "2018-07-30T18:30:09.000Z", + "v21": { + "createdDate": "2018-09-10T22:49:44.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -119534,7 +122144,9 @@ "iam:SimulatePrincipalPolicy", "iot:DescribeEndpoint", "iot:ListThings", + "kinesis:DescribeStream", "kinesis:ListStreams", + "kinesis:ListTagsForStream", "kinesisanalytics:ListApplications", "kms:Describe*", "kms:Get*", @@ -119542,10 +122154,8 @@ "lambda:GetAccountSettings", "lambda:GetPolicy", "lambda:ListFunctions", - "logs:DescribeDestinations", - "logs:DescribeLogGroups", - "logs:DescribeMetricFilters", - "logs:DescribeResourcePolicies", + "logs:Describe*", + "logs:ListTagsLogGroup", "machinelearning:DescribeMLModels", "mediastore:GetContainerPolicy", "mediastore:ListContainers", @@ -119581,6 +122191,7 @@ "ses:GetIdentityDkimAttributes", "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", + "ses:ListVerifiedEmailAddresses", "snowball:ListClusters", "snowball:ListJobs", "sns:GetTopicAttributes", @@ -119617,8 +122228,8 @@ ] } }, - "v21": { - "createdDate": "2018-09-10T22:49:44.000Z", + "v22": { + "createdDate": "2018-09-17T20:33:00.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -119684,7 +122295,7 @@ "elasticbeanstalk:Describe*", "elasticfilesystem:DescribeFileSystems", "elasticloadbalancing:Describe*", - "elasticmapreduce:DescribeJobFlows", + "elasticmapreduce:Describe*", "elasticmapreduce:ListClusters", "elasticmapreduce:ListInstances", "es:Describe*", @@ -119794,8 +122405,8 @@ ] } }, - "v22": { - "createdDate": "2018-09-17T20:33:00.000Z", + "v23": { + "createdDate": "2018-10-16T20:29:56.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -119806,9 +122417,12 @@ "acm:DescribeCertificate", "acm:ListCertificates", "application-autoscaling:Describe*", + "athena:List*", "autoscaling:Describe*", "batch:DescribeComputeEnvironments", "batch:DescribeJobDefinitions", + "cloud9:Describe*", + "cloud9:ListEnvironments", "clouddirectory:ListDirectories", "cloudformation:DescribeStack*", "cloudformation:GetTemplate", @@ -119836,8 +122450,12 @@ "codedeploy:Get*", "codedeploy:List*", "codepipeline:ListPipelines", + "codestar:Describe*", + "codestar:List*", "cognito-identity:ListIdentityPools", "cognito-idp:ListUserPools", + "cognito-sync:Describe*", + "cognito-sync:List*", "config:Deliver*", "config:Describe*", "config:Get*", @@ -119848,7 +122466,11 @@ "datapipeline:ListPipelines", "datapipeline:QueryObjects", "datapipeline:ValidatePipelineDefinition", + "dax:Describe*", + "dax:ListTags", "directconnect:Describe*", + "dms:Describe*", + "dms:ListTagsForResource", "ds:DescribeDirectories", "dynamodb:ListStreams", "dynamodb:ListTables", @@ -119857,6 +122479,8 @@ "ecr:GetRepositoryPolicy", "ecs:Describe*", "ecs:List*", + "eks:DescribeCluster", + "eks:ListClusters", "elasticache:Describe*", "elasticbeanstalk:Describe*", "elasticfilesystem:DescribeFileSystems", @@ -119909,6 +122533,8 @@ "rds:DownloadDBLogFilePortion", "rds:ListTagsForResource", "redshift:Describe*", + "rekognition:Describe*", + "rekognition:List*", "route53:Get*", "route53:List*", "route53domains:GetDomainDetail", @@ -119927,6 +122553,8 @@ "s3:GetObjectVersionAcl", "s3:GetReplicationConfiguration", "s3:ListAllMyBuckets", + "sagemaker:Describe*", + "sagemaker:List*", "sdb:DomainMetadata", "sdb:ListDomains", "serverlessrepo:GetApplicationPolicy", @@ -119935,6 +122563,8 @@ "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", "ses:ListVerifiedEmailAddresses", + "shield:Describe*", + "shield:List*", "snowball:ListClusters", "snowball:ListJobs", "sns:GetTopicAttributes", @@ -119971,8 +122601,8 @@ ] } }, - "v23": { - "createdDate": "2018-10-16T20:29:56.000Z", + "v24": { + "createdDate": "2018-11-05T19:03:40.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -120002,6 +122632,7 @@ "cloudsearch:DescribeDomains", "cloudsearch:DescribeServiceAccessPolicies", "cloudtrail:DescribeTrails", + "cloudtrail:GetEventSelectors", "cloudtrail:GetTrailStatus", "cloudtrail:ListTags", "cloudtrail:LookupEvents", @@ -120038,6 +122669,12 @@ "dms:Describe*", "dms:ListTagsForResource", "ds:DescribeDirectories", + "dynamodb:DescribeContinuousBackups", + "dynamodb:DescribeGlobalTable", + "dynamodb:DescribeTable", + "dynamodb:DescribeTimeToLive", + "dynamodb:ListBackups", + "dynamodb:ListGlobalTables", "dynamodb:ListStreams", "dynamodb:ListTables", "ec2:Describe*", @@ -120163,12 +122800,29 @@ "waf-regional:ListWebACLs", "workspaces:Describe*" ] + }, + { + "Effect": "Allow", + "Action": [ + "apigateway:HEAD", + "apigateway:GET", + "apigateway:OPTIONS" + ], + "Resource": [ + "arn:aws:apigateway:*::/restapis", + "arn:aws:apigateway:*::/restapis/*/authorizers", + "arn:aws:apigateway:*::/restapis/*/authorizers/*", + "arn:aws:apigateway:*::/restapis/*/resources", + "arn:aws:apigateway:*::/restapis/*/resources/*", + "arn:aws:apigateway:*::/restapis/*/resources/*/methods/*", + "arn:aws:apigateway:*::/vpclinks" + ] } ] } }, - "v24": { - "createdDate": "2018-11-05T19:03:40.000Z", + "v27": { + "createdDate": "2019-04-29T18:33:52.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -120176,13 +122830,17 @@ "Effect": "Allow", "Resource": "*", "Action": [ - "acm:DescribeCertificate", - "acm:ListCertificates", + "acm:Describe*", + "acm:List*", "application-autoscaling:Describe*", + "appmesh:Describe*", + "appmesh:List*", + "appsync:List*", "athena:List*", "autoscaling:Describe*", "batch:DescribeComputeEnvironments", "batch:DescribeJobDefinitions", + "chime:List*", "cloud9:Describe*", "cloud9:ListEnvironments", "clouddirectory:ListDirectories", @@ -120219,9 +122877,14 @@ "cognito-idp:ListUserPools", "cognito-sync:Describe*", "cognito-sync:List*", + "comprehend:Describe*", + "comprehend:List*", + "config:BatchGetAggregateResourceConfig", + "config:BatchGetResourceConfig", "config:Deliver*", "config:Describe*", "config:Get*", + "config:List*", "datapipeline:DescribeObjects", "datapipeline:DescribePipelines", "datapipeline:EvaluateExpression", @@ -120229,6 +122892,8 @@ "datapipeline:ListPipelines", "datapipeline:QueryObjects", "datapipeline:ValidatePipelineDefinition", + "datasync:Describe*", + "datasync:List*", "dax:Describe*", "dax:ListTags", "directconnect:Describe*", @@ -120253,33 +122918,46 @@ "elasticache:Describe*", "elasticbeanstalk:Describe*", "elasticfilesystem:DescribeFileSystems", + "elasticfilesystem:DescribeMountTargetSecurityGroups", + "elasticfilesystem:DescribeMountTargets", "elasticloadbalancing:Describe*", "elasticmapreduce:Describe*", "elasticmapreduce:ListClusters", "elasticmapreduce:ListInstances", "es:Describe*", "es:ListDomainNames", - "events:DescribeEventBus", - "events:ListRules", + "events:Describe*", + "events:List*", "firehose:Describe*", "firehose:List*", + "fms:ListComplianceStatus", + "fms:ListPolicies", + "fsx:Describe*", + "fsx:List*", "gamelift:ListBuilds", "gamelift:ListFleets", "glacier:DescribeVault", "glacier:GetVaultAccessPolicy", "glacier:ListVaults", + "globalaccelerator:Describe*", + "globalaccelerator:List*", + "greengrass:List*", "guardduty:Get*", "guardduty:List*", "iam:GenerateCredentialReport", + "iam:GenerateServiceLastAccessedDetails", "iam:Get*", - "iam:GetAccountAuthorizationDetails", - "iam:GetContextKeysForCustomPolicy", - "iam:GetContextKeysForPrincipalPolicy", "iam:List*", "iam:SimulateCustomPolicy", "iam:SimulatePrincipalPolicy", - "iot:DescribeEndpoint", - "iot:ListThings", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", + "iot:Describe*", + "iot:GetPolicy", + "iot:GetPolicyVersion", + "iot:List*", "kinesis:DescribeStream", "kinesis:ListStreams", "kinesis:ListTagsForStream", @@ -120288,22 +122966,34 @@ "kms:Get*", "kms:List*", "lambda:GetAccountSettings", + "lambda:GetFunctionConfiguration", + "lambda:GetLayerVersionPolicy", "lambda:GetPolicy", - "lambda:ListFunctions", + "lambda:List*", + "license-manager:List*", + "lightsail:GetInstances", "logs:Describe*", "logs:ListTagsLogGroup", "machinelearning:DescribeMLModels", + "mediaconnect:Describe*", + "mediaconnect:List*", "mediastore:GetContainerPolicy", "mediastore:ListContainers", + "opsworks:DescribeStacks", "opsworks-cm:DescribeServers", "organizations:List*", "organizations:Describe*", + "quicksight:Describe*", + "quicksight:List*", + "ram:List*", "rds:Describe*", "rds:DownloadDBLogFilePortion", "rds:ListTagsForResource", "redshift:Describe*", "rekognition:Describe*", "rekognition:List*", + "robomaker:Describe*", + "robomaker:List*", "route53:Get*", "route53:List*", "route53domains:GetDomainDetail", @@ -120311,7 +123001,9 @@ "route53domains:ListDomains", "route53domains:ListOperations", "route53domains:ListTagsForDomain", + "route53resolver:List*", "s3:GetAccelerateConfiguration", + "s3:GetAccountPublicAccessBlock", "s3:GetAnalyticsConfiguration", "s3:GetBucket*", "s3:GetEncryptionConfiguration", @@ -120320,14 +123012,20 @@ "s3:GetMetricsConfiguration", "s3:GetObjectAcl", "s3:GetObjectVersionAcl", + "s3:GetPublicAccessBlock", "s3:GetReplicationConfiguration", "s3:ListAllMyBuckets", "sagemaker:Describe*", "sagemaker:List*", "sdb:DomainMetadata", "sdb:ListDomains", + "secretsmanager:GetResourcePolicy", + "secretsmanager:ListSecrets", + "secretsmanager:ListSecretVersionIds", + "securityhub:Get*", + "securityhub:List*", "serverlessrepo:GetApplicationPolicy", - "serverlessrepo:ListApplications", + "serverlessrepo:List*", "ses:GetIdentityDkimAttributes", "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", @@ -120340,9 +123038,13 @@ "sns:ListSubscriptionsByTopic", "sns:ListTopics", "sqs:GetQueueAttributes", + "sqs:ListDeadLetterSourceQueues", "sqs:ListQueues", + "sqs:ListQueueTags", "ssm:Describe*", "ssm:ListDocuments", + "sso:DescribePermissionsPolicies", + "sso:List*", "states:ListStateMachines", "storagegateway:DescribeBandwidthRateLimit", "storagegateway:DescribeCache", @@ -120361,6 +123063,9 @@ "storagegateway:List*", "tag:GetResources", "tag:GetTagKeys", + "transfer:Describe*", + "transfer:List*", + "translate:List*", "trustedadvisor:Describe*", "waf:ListWebACLs", "waf-regional:ListWebACLs", @@ -120387,8 +123092,8 @@ ] } }, - "v27": { - "createdDate": "2019-04-29T18:33:52.000Z", + "v25": { + "createdDate": "2019-01-11T01:51:30.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -120445,12 +123150,9 @@ "cognito-sync:List*", "comprehend:Describe*", "comprehend:List*", - "config:BatchGetAggregateResourceConfig", - "config:BatchGetResourceConfig", "config:Deliver*", "config:Describe*", "config:Get*", - "config:List*", "datapipeline:DescribeObjects", "datapipeline:DescribePipelines", "datapipeline:EvaluateExpression", @@ -120484,20 +123186,16 @@ "elasticache:Describe*", "elasticbeanstalk:Describe*", "elasticfilesystem:DescribeFileSystems", - "elasticfilesystem:DescribeMountTargetSecurityGroups", - "elasticfilesystem:DescribeMountTargets", "elasticloadbalancing:Describe*", "elasticmapreduce:Describe*", "elasticmapreduce:ListClusters", "elasticmapreduce:ListInstances", "es:Describe*", "es:ListDomainNames", - "events:Describe*", - "events:List*", + "events:DescribeEventBus", + "events:ListRules", "firehose:Describe*", "firehose:List*", - "fms:ListComplianceStatus", - "fms:ListPolicies", "fsx:Describe*", "fsx:List*", "gamelift:ListBuilds", @@ -120511,18 +123209,11 @@ "guardduty:Get*", "guardduty:List*", "iam:GenerateCredentialReport", - "iam:GenerateServiceLastAccessedDetails", "iam:Get*", "iam:List*", "iam:SimulateCustomPolicy", "iam:SimulatePrincipalPolicy", - "inspector:Describe*", - "inspector:Get*", - "inspector:List*", - "inspector:Preview*", "iot:Describe*", - "iot:GetPolicy", - "iot:GetPolicyVersion", "iot:List*", "kinesis:DescribeStream", "kinesis:ListStreams", @@ -120532,12 +123223,9 @@ "kms:Get*", "kms:List*", "lambda:GetAccountSettings", - "lambda:GetFunctionConfiguration", - "lambda:GetLayerVersionPolicy", "lambda:GetPolicy", "lambda:List*", "license-manager:List*", - "lightsail:GetInstances", "logs:Describe*", "logs:ListTagsLogGroup", "machinelearning:DescribeMLModels", @@ -120545,7 +123233,6 @@ "mediaconnect:List*", "mediastore:GetContainerPolicy", "mediastore:ListContainers", - "opsworks:DescribeStacks", "opsworks-cm:DescribeServers", "organizations:List*", "organizations:Describe*", @@ -120569,7 +123256,6 @@ "route53domains:ListTagsForDomain", "route53resolver:List*", "s3:GetAccelerateConfiguration", - "s3:GetAccountPublicAccessBlock", "s3:GetAnalyticsConfiguration", "s3:GetBucket*", "s3:GetEncryptionConfiguration", @@ -120585,9 +123271,6 @@ "sagemaker:List*", "sdb:DomainMetadata", "sdb:ListDomains", - "secretsmanager:GetResourcePolicy", - "secretsmanager:ListSecrets", - "secretsmanager:ListSecretVersionIds", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", @@ -120604,13 +123287,9 @@ "sns:ListSubscriptionsByTopic", "sns:ListTopics", "sqs:GetQueueAttributes", - "sqs:ListDeadLetterSourceQueues", "sqs:ListQueues", - "sqs:ListQueueTags", "ssm:Describe*", "ssm:ListDocuments", - "sso:DescribePermissionsPolicies", - "sso:List*", "states:ListStateMachines", "storagegateway:DescribeBandwidthRateLimit", "storagegateway:DescribeCache", @@ -120658,8 +123337,8 @@ ] } }, - "v25": { - "createdDate": "2019-01-11T01:51:30.000Z", + "v26": { + "createdDate": "2019-03-22T16:38:42.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -120758,8 +123437,8 @@ "elasticmapreduce:ListInstances", "es:Describe*", "es:ListDomainNames", - "events:DescribeEventBus", - "events:ListRules", + "events:Describe*", + "events:List*", "firehose:Describe*", "firehose:List*", "fsx:Describe*", @@ -120775,10 +123454,15 @@ "guardduty:Get*", "guardduty:List*", "iam:GenerateCredentialReport", + "iam:GenerateServiceLastAccessedDetails", "iam:Get*", "iam:List*", "iam:SimulateCustomPolicy", "iam:SimulatePrincipalPolicy", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", "iot:Describe*", "iot:List*", "kinesis:DescribeStream", @@ -120837,6 +123521,9 @@ "sagemaker:List*", "sdb:DomainMetadata", "sdb:ListDomains", + "secretsmanager:GetResourcePolicy", + "secretsmanager:ListSecrets", + "secretsmanager:ListSecretVersionIds", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", @@ -120903,8 +123590,8 @@ ] } }, - "v26": { - "createdDate": "2019-03-22T16:38:42.000Z", + "v31": { + "createdDate": "2019-10-15T21:02:23.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -120961,9 +123648,12 @@ "cognito-sync:List*", "comprehend:Describe*", "comprehend:List*", + "config:BatchGetAggregateResourceConfig", + "config:BatchGetResourceConfig", "config:Deliver*", "config:Describe*", "config:Get*", + "config:List*", "datapipeline:DescribeObjects", "datapipeline:DescribePipelines", "datapipeline:EvaluateExpression", @@ -120997,6 +123687,8 @@ "elasticache:Describe*", "elasticbeanstalk:Describe*", "elasticfilesystem:DescribeFileSystems", + "elasticfilesystem:DescribeMountTargetSecurityGroups", + "elasticfilesystem:DescribeMountTargets", "elasticloadbalancing:Describe*", "elasticmapreduce:Describe*", "elasticmapreduce:ListClusters", @@ -121007,6 +123699,8 @@ "events:List*", "firehose:Describe*", "firehose:List*", + "fms:ListComplianceStatus", + "fms:ListPolicies", "fsx:Describe*", "fsx:List*", "gamelift:ListBuilds", @@ -121030,6 +123724,8 @@ "inspector:List*", "inspector:Preview*", "iot:Describe*", + "iot:GetPolicy", + "iot:GetPolicyVersion", "iot:List*", "kinesis:DescribeStream", "kinesis:ListStreams", @@ -121039,9 +123735,13 @@ "kms:Get*", "kms:List*", "lambda:GetAccountSettings", + "lambda:GetFunctionConfiguration", + "lambda:GetLayerVersionPolicy", "lambda:GetPolicy", "lambda:List*", "license-manager:List*", + "lightsail:GetInstances", + "lightsail:GetLoadBalancers", "logs:Describe*", "logs:ListTagsLogGroup", "machinelearning:DescribeMLModels", @@ -121049,6 +123749,7 @@ "mediaconnect:List*", "mediastore:GetContainerPolicy", "mediastore:ListContainers", + "opsworks:DescribeStacks", "opsworks-cm:DescribeServers", "organizations:List*", "organizations:Describe*", @@ -121071,7 +123772,9 @@ "route53domains:ListOperations", "route53domains:ListTagsForDomain", "route53resolver:List*", + "route53resolver:Get*", "s3:GetAccelerateConfiguration", + "s3:GetAccountPublicAccessBlock", "s3:GetAnalyticsConfiguration", "s3:GetBucket*", "s3:GetEncryptionConfiguration", @@ -121080,7 +123783,6 @@ "s3:GetMetricsConfiguration", "s3:GetObjectAcl", "s3:GetObjectVersionAcl", - "s3:GetPublicAccessBlock", "s3:GetReplicationConfiguration", "s3:ListAllMyBuckets", "sagemaker:Describe*", @@ -121090,13 +123792,16 @@ "secretsmanager:GetResourcePolicy", "secretsmanager:ListSecrets", "secretsmanager:ListSecretVersionIds", + "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", "serverlessrepo:List*", "ses:GetIdentityDkimAttributes", + "ses:GetIdentityPolicies", "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", + "ses:ListIdentityPolicies", "ses:ListVerifiedEmailAddresses", "shield:Describe*", "shield:List*", @@ -121106,9 +123811,14 @@ "sns:ListSubscriptionsByTopic", "sns:ListTopics", "sqs:GetQueueAttributes", + "sqs:ListDeadLetterSourceQueues", "sqs:ListQueues", + "sqs:ListQueueTags", "ssm:Describe*", + "ssm:GetAutomationExecution", "ssm:ListDocuments", + "sso:DescribePermissionsPolicies", + "sso:List*", "states:ListStateMachines", "storagegateway:DescribeBandwidthRateLimit", "storagegateway:DescribeCache", @@ -121139,25 +123849,30 @@ { "Effect": "Allow", "Action": [ - "apigateway:HEAD", - "apigateway:GET", - "apigateway:OPTIONS" + "apigateway:GET" ], "Resource": [ + "arn:aws:apigateway:*::/apis", + "arn:aws:apigateway:*::/apis/*/stages", + "arn:aws:apigateway:*::/apis/*/stages/*", + "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/authorizers", "arn:aws:apigateway:*::/restapis/*/authorizers/*", + "arn:aws:apigateway:*::/restapis/*/documentation/versions", "arn:aws:apigateway:*::/restapis/*/resources", "arn:aws:apigateway:*::/restapis/*/resources/*", "arn:aws:apigateway:*::/restapis/*/resources/*/methods/*", + "arn:aws:apigateway:*::/restapis/*/stages", + "arn:aws:apigateway:*::/restapis/*/stages/*", "arn:aws:apigateway:*::/vpclinks" ] } ] } }, - "v31": { - "createdDate": "2019-10-15T21:02:23.000Z", + "v28": { + "createdDate": "2019-06-06T18:09:18.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -121338,7 +124053,6 @@ "route53domains:ListOperations", "route53domains:ListTagsForDomain", "route53resolver:List*", - "route53resolver:Get*", "s3:GetAccelerateConfiguration", "s3:GetAccountPublicAccessBlock", "s3:GetAnalyticsConfiguration", @@ -121358,16 +124072,13 @@ "secretsmanager:GetResourcePolicy", "secretsmanager:ListSecrets", "secretsmanager:ListSecretVersionIds", - "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", "serverlessrepo:List*", "ses:GetIdentityDkimAttributes", - "ses:GetIdentityPolicies", "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", - "ses:ListIdentityPolicies", "ses:ListVerifiedEmailAddresses", "shield:Describe*", "shield:List*", @@ -121381,7 +124092,6 @@ "sqs:ListQueues", "sqs:ListQueueTags", "ssm:Describe*", - "ssm:GetAutomationExecution", "ssm:ListDocuments", "sso:DescribePermissionsPolicies", "sso:List*", @@ -121418,27 +124128,20 @@ "apigateway:GET" ], "Resource": [ - "arn:aws:apigateway:*::/apis", - "arn:aws:apigateway:*::/apis/*/stages", - "arn:aws:apigateway:*::/apis/*/stages/*", - "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/authorizers", "arn:aws:apigateway:*::/restapis/*/authorizers/*", - "arn:aws:apigateway:*::/restapis/*/documentation/versions", "arn:aws:apigateway:*::/restapis/*/resources", "arn:aws:apigateway:*::/restapis/*/resources/*", "arn:aws:apigateway:*::/restapis/*/resources/*/methods/*", - "arn:aws:apigateway:*::/restapis/*/stages", - "arn:aws:apigateway:*::/restapis/*/stages/*", "arn:aws:apigateway:*::/vpclinks" ] } ] } }, - "v28": { - "createdDate": "2019-06-06T18:09:18.000Z", + "v30": { + "createdDate": "2019-08-16T10:06:35.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -121619,6 +124322,7 @@ "route53domains:ListOperations", "route53domains:ListTagsForDomain", "route53resolver:List*", + "route53resolver:Get*", "s3:GetAccelerateConfiguration", "s3:GetAccountPublicAccessBlock", "s3:GetAnalyticsConfiguration", @@ -121638,6 +124342,7 @@ "secretsmanager:GetResourcePolicy", "secretsmanager:ListSecrets", "secretsmanager:ListSecretVersionIds", + "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", @@ -121706,8 +124411,8 @@ ] } }, - "v30": { - "createdDate": "2019-08-16T10:06:35.000Z", + "v29": { + "createdDate": "2019-07-18T20:16:48.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -121908,7 +124613,6 @@ "secretsmanager:GetResourcePolicy", "secretsmanager:ListSecrets", "secretsmanager:ListSecretVersionIds", - "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", @@ -121977,8 +124681,8 @@ ] } }, - "v29": { - "createdDate": "2019-07-18T20:16:48.000Z", + "v32": { + "createdDate": "2020-02-25T16:08:50.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -121986,12 +124690,22 @@ "Effect": "Allow", "Resource": "*", "Action": [ + "access-analyzer:GetAnalyzedResource", + "access-analyzer:GetAnalyzer", + "access-analyzer:GetArchiveRule", + "access-analyzer:GetFinding", + "access-analyzer:ListAnalyzedResources", + "access-analyzer:ListAnalyzers", + "access-analyzer:ListArchiveRules", + "access-analyzer:ListFindings", + "access-analyzer:ListTagsForResource", "acm:Describe*", "acm:List*", "application-autoscaling:Describe*", "appmesh:Describe*", "appmesh:List*", "appsync:List*", + "athena:GetWorkGroup", "athena:List*", "autoscaling:Describe*", "batch:DescribeComputeEnvironments", @@ -122161,6 +124875,9 @@ "route53resolver:List*", "route53resolver:Get*", "s3:GetAccelerateConfiguration", + "s3:GetAccessPoint", + "s3:GetAccessPointPolicy", + "s3:GetAccessPointPolicyStatus", "s3:GetAccountPublicAccessBlock", "s3:GetAnalyticsConfiguration", "s3:GetBucket*", @@ -122171,6 +124888,7 @@ "s3:GetObjectAcl", "s3:GetObjectVersionAcl", "s3:GetReplicationConfiguration", + "s3:ListAccessPoints", "s3:ListAllMyBuckets", "sagemaker:Describe*", "sagemaker:List*", @@ -122179,13 +124897,16 @@ "secretsmanager:GetResourcePolicy", "secretsmanager:ListSecrets", "secretsmanager:ListSecretVersionIds", + "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", "serverlessrepo:List*", "ses:GetIdentityDkimAttributes", + "ses:GetIdentityPolicies", "ses:GetIdentityVerificationAttributes", "ses:ListIdentities", + "ses:ListIdentityPolicies", "ses:ListVerifiedEmailAddresses", "shield:Describe*", "shield:List*", @@ -122199,6 +124920,7 @@ "sqs:ListQueues", "sqs:ListQueueTags", "ssm:Describe*", + "ssm:GetAutomationExecution", "ssm:ListDocuments", "sso:DescribePermissionsPolicies", "sso:List*", @@ -122235,20 +124957,27 @@ "apigateway:GET" ], "Resource": [ + "arn:aws:apigateway:*::/apis", + "arn:aws:apigateway:*::/apis/*/stages", + "arn:aws:apigateway:*::/apis/*/stages/*", + "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/authorizers", "arn:aws:apigateway:*::/restapis/*/authorizers/*", + "arn:aws:apigateway:*::/restapis/*/documentation/versions", "arn:aws:apigateway:*::/restapis/*/resources", "arn:aws:apigateway:*::/restapis/*/resources/*", "arn:aws:apigateway:*::/restapis/*/resources/*/methods/*", + "arn:aws:apigateway:*::/restapis/*/stages", + "arn:aws:apigateway:*::/restapis/*/stages/*", "arn:aws:apigateway:*::/vpclinks" ] } ] } }, - "v32": { - "createdDate": "2020-02-25T16:08:50.000Z", + "v33": { + "createdDate": "2020-09-28T18:51:23.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -122514,7 +125243,33 @@ "trustedadvisor:Describe*", "waf:ListWebACLs", "waf-regional:ListWebACLs", - "workspaces:Describe*" + "workspaces:Describe*", + "cloudsearch:DescribeDomainEndpointOptions", + "cloudwatch:ListTagsForResource", + "detective:ListGraphs", + "detective:ListMembers", + "dynamodb:ListTagsOfResource", + "ec2:DescribeTransitGatewayAttachments", + "ec2:DescribeTransitGatewayMulticastDomains", + "ec2:DescribeTransitGatewayPeeringAttachments", + "ec2:DescribeTransitGatewayRouteTables", + "ec2:DescribeTransitGateways", + "ec2:DescribeTransitGatewayVpcAttachments", + "eks:DescribeNodeGroup", + "eks:ListNodeGroups", + "elasticache:ListTagsForResource", + "elasticbeanstalk:DescribeApplications", + "elasticbeanstalk:ListTagsForResource", + "elasticmapreduce:GetBlockPublicAccessConfiguration", + "es:ListElasticsearchInstanceTypeDetails", + "es:ListElasticsearchVersions", + "es:ListTags", + "events:TestEventPattern", + "glue:GetDataCatalogEncryptionSettings", + "glue:GetDevEndpoints", + "guardduty:DescribePublishingDestination", + "secretsmanager:DescribeSecret", + "ssm:ListTagsForResource" ] }, { @@ -122542,8 +125297,8 @@ ] } }, - "v33": { - "createdDate": "2020-09-28T18:51:23.000Z", + "v34": { + "createdDate": "2020-12-15T00:04:54.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -122640,6 +125395,14 @@ "dynamodb:ListStreams", "dynamodb:ListTables", "ec2:Describe*", + "ec2:DescribeTransitGatewayAttachments", + "ec2:DescribeTransitGatewayMulticastDomains", + "ec2:DescribeTransitGatewayPeeringAttachments", + "ec2:DescribeTransitGatewayRouteTables", + "ec2:DescribeTransitGateways", + "ec2:DescribeTransitGatewayVpcAttachments", + "ec2:GetManagedPrefixListAssociations", + "ec2:GetManagedPrefixListEntries", "ecr:DescribeRepositories", "ecr:GetRepositoryPolicy", "ecs:Describe*", @@ -122775,6 +125538,7 @@ "snowball:ListJobs", "sns:GetTopicAttributes", "sns:ListSubscriptionsByTopic", + "sns:ListTagsForResource", "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListDeadLetterSourceQueues", @@ -122807,13 +125571,28 @@ "transfer:List*", "translate:List*", "trustedadvisor:Describe*", + "waf:GetWebACL", "waf:ListWebACLs", + "waf:ListTagsForResource", + "wafv2:GetWebACL", + "wafv2:ListAvailableManagedRuleGroups", + "wafv2:ListIPSets", + "wafv2:ListLoggingConfigurations", + "wafv2:ListRegexPatternSets", + "wafv2:ListResourcesForWebACL", + "wafv2:ListRuleGroups", + "wafv2:ListTagsForResource", + "wafv2:ListWebACLs", + "waf-regional:GetWebACL", + "waf-regional:ListResourcesForWebACL", + "waf-regional:ListTagsForResource", "waf-regional:ListWebACLs", "workspaces:Describe*", "cloudsearch:DescribeDomainEndpointOptions", "cloudwatch:ListTagsForResource", "detective:ListGraphs", "detective:ListMembers", + "detective:GetGraphIngestState", "dynamodb:ListTagsOfResource", "ec2:DescribeTransitGatewayAttachments", "ec2:DescribeTransitGatewayMulticastDomains", @@ -122821,6 +125600,11 @@ "ec2:DescribeTransitGatewayRouteTables", "ec2:DescribeTransitGateways", "ec2:DescribeTransitGatewayVpcAttachments", + "ec2:GetManagedPrefixListAssociations", + "ec2:GetManagedPrefixListEntries", + "ecr:DescribeImages", + "ecr:GetLifecyclePolicy", + "ecr:ListTagsForResource", "eks:DescribeNodeGroup", "eks:ListNodeGroups", "elasticache:ListTagsForResource", @@ -122835,6 +125619,7 @@ "glue:GetDevEndpoints", "guardduty:DescribePublishingDestination", "secretsmanager:DescribeSecret", + "sns:ListTagsForResource", "ssm:ListTagsForResource" ] }, @@ -122848,6 +125633,7 @@ "arn:aws:apigateway:*::/apis/*/stages", "arn:aws:apigateway:*::/apis/*/stages/*", "arn:aws:apigateway:*::/apis/*/routes", + "arn:aws:apigateway:*::/clientcertificates/*", "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/authorizers", "arn:aws:apigateway:*::/restapis/*/authorizers/*", @@ -122857,14 +125643,15 @@ "arn:aws:apigateway:*::/restapis/*/resources/*/methods/*", "arn:aws:apigateway:*::/restapis/*/stages", "arn:aws:apigateway:*::/restapis/*/stages/*", + "arn:aws:apigateway:*::/tags/*", "arn:aws:apigateway:*::/vpclinks" ] } ] } }, - "v34": { - "createdDate": "2020-12-15T00:04:54.000Z", + "v36": { + "createdDate": "2022-10-06T19:49:40.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -122881,15 +125668,23 @@ "access-analyzer:ListArchiveRules", "access-analyzer:ListFindings", "access-analyzer:ListTagsForResource", + "acm-pca:DescribeCertificateAuthority", + "acm-pca:DescribeCertificateAuthorityAuditReport", + "acm-pca:ListCertificateAuthorities", + "acm-pca:ListPermissions", "acm:Describe*", "acm:List*", + "airflow:ListEnvironments", "application-autoscaling:Describe*", "appmesh:Describe*", "appmesh:List*", "appsync:List*", "athena:GetWorkGroup", "athena:List*", + "autoscaling-plans:DescribeScalingPlans", "autoscaling:Describe*", + "backup:DescribeRegionSettings", + "backup:ListBackupVaults", "batch:DescribeComputeEnvironments", "batch:DescribeJobDefinitions", "chime:List*", @@ -122897,36 +125692,57 @@ "cloud9:ListEnvironments", "clouddirectory:ListDirectories", "cloudformation:DescribeStack*", + "cloudformation:GetStackPolicy", "cloudformation:GetTemplate", "cloudformation:ListStack*", - "cloudformation:GetStackPolicy", "cloudfront:Get*", "cloudfront:List*", "cloudhsm:ListHapgs", "cloudhsm:ListHsms", "cloudhsm:ListLunaClients", + "cloudsearch:DescribeDomainEndpointOptions", "cloudsearch:DescribeDomains", "cloudsearch:DescribeServiceAccessPolicies", "cloudtrail:DescribeTrails", "cloudtrail:GetEventSelectors", + "cloudtrail:GetTrail", "cloudtrail:GetTrailStatus", "cloudtrail:ListTags", "cloudtrail:LookupEvents", "cloudwatch:Describe*", + "cloudwatch:ListTagsForResource", + "codebuild:BatchGetProjects", "codebuild:ListProjects", "codecommit:BatchGetRepositories", "codecommit:GetBranch", "codecommit:GetObjectIdentifier", "codecommit:GetRepository", + "codecommit:GetRepositoryTriggers", "codecommit:List*", "codedeploy:Batch*", "codedeploy:Get*", "codedeploy:List*", + "codepipeline:GetJobDetails", + "codepipeline:GetPipeline", + "codepipeline:GetPipelineExecution", + "codepipeline:GetPipelineState", "codepipeline:ListPipelines", "codestar:Describe*", "codestar:List*", + "cognito-identity:Describe*", "cognito-identity:ListIdentityPools", + "cognito-identity:ListTagsForResource", + "cognito-idp:Describe*", + "cognito-idp:ListDevices", + "cognito-idp:ListGroups", + "cognito-idp:ListIdentityProviders", + "cognito-idp:ListResourceServers", + "cognito-idp:ListTagsForResource", + "cognito-idp:ListUserImportJobs", + "cognito-idp:ListUserPoolClients", "cognito-idp:ListUserPools", + "cognito-idp:ListUsers", + "cognito-idp:ListUsersInGroup", "cognito-sync:Describe*", "cognito-sync:List*", "comprehend:Describe*", @@ -122948,6 +125764,9 @@ "datasync:List*", "dax:Describe*", "dax:ListTags", + "detective:GetGraphIngestState", + "detective:ListGraphs", + "detective:ListMembers", "directconnect:Describe*", "dms:Describe*", "dms:ListTagsForResource", @@ -122960,48 +125779,81 @@ "dynamodb:ListGlobalTables", "dynamodb:ListStreams", "dynamodb:ListTables", + "dynamodb:ListTagsOfResource", "ec2:Describe*", - "ec2:DescribeTransitGatewayAttachments", - "ec2:DescribeTransitGatewayMulticastDomains", - "ec2:DescribeTransitGatewayPeeringAttachments", - "ec2:DescribeTransitGatewayRouteTables", - "ec2:DescribeTransitGateways", - "ec2:DescribeTransitGatewayVpcAttachments", "ec2:GetManagedPrefixListAssociations", "ec2:GetManagedPrefixListEntries", + "ec2:GetTransitGatewayAttachmentPropagations", + "ec2:GetTransitGatewayMulticastDomainAssociations", + "ec2:GetTransitGatewayPrefixListReferences", + "ec2:GetTransitGatewayRouteTableAssociations", + "ec2:GetTransitGatewayRouteTablePropagations", + "ecr-public:DescribeImageTags", + "ecr-public:DescribeImages", + "ecr-public:DescribeRegistries", + "ecr-public:DescribeRepositories", + "ecr-public:GetRegistryCatalogData", + "ecr-public:GetRepositoryCatalogData", + "ecr-public:GetRepositoryPolicy", + "ecr:DescribeImageScanFindings", + "ecr:DescribeImages", "ecr:DescribeRepositories", + "ecr:GetLifecyclePolicy", "ecr:GetRepositoryPolicy", + "ecr:ListImages", + "ecr:ListTagsForResource", "ecs:Describe*", "ecs:List*", "eks:DescribeCluster", + "eks:DescribeNodeGroup", "eks:ListClusters", + "eks:ListNodeGroups", "elasticache:Describe*", + "elasticache:ListTagsForResource", "elasticbeanstalk:Describe*", + "elasticbeanstalk:DescribeApplications", + "elasticbeanstalk:ListTagsForResource", "elasticfilesystem:DescribeFileSystems", "elasticfilesystem:DescribeMountTargetSecurityGroups", "elasticfilesystem:DescribeMountTargets", "elasticloadbalancing:Describe*", "elasticmapreduce:Describe*", + "elasticmapreduce:GetBlockPublicAccessConfiguration", "elasticmapreduce:ListClusters", "elasticmapreduce:ListInstances", + "elasticmapreduce:ListSecurityConfigurations", + "elasticloadbalancing:Describe*", "es:Describe*", "es:ListDomainNames", + "es:ListElasticsearchInstanceTypeDetails", + "es:ListElasticsearchVersions", + "es:ListTags", "events:Describe*", "events:List*", + "events:TestEventPattern", "firehose:Describe*", "firehose:List*", "fms:ListComplianceStatus", "fms:ListPolicies", + "forecast:ListDatasets", "fsx:Describe*", "fsx:List*", "gamelift:ListBuilds", "gamelift:ListFleets", "glacier:DescribeVault", "glacier:GetVaultAccessPolicy", + "glacier:GetVaultLock", "glacier:ListVaults", "globalaccelerator:Describe*", "globalaccelerator:List*", + "glue:GetCrawlers", + "glue:GetDataCatalogEncryptionSettings", + "glue:GetDatabases", + "glue:GetDevEndpoints", + "glue:GetJobs", + "glue:GetResourcePolicy", "greengrass:List*", + "guardduty:DescribePublishingDestination", "guardduty:Get*", "guardduty:List*", "iam:GenerateCredentialReport", @@ -123014,11 +125866,37 @@ "inspector:Get*", "inspector:List*", "inspector:Preview*", + "inspector2:BatchGetAccountStatus", + "inspector2:BatchGetFreeTrialInfo", + "inspector2:DescribeOrganizationConfiguration", + "inspector2:GetDelegatedAdminAccount", + "inspector2:GetFindingsReportStatus", + "inspector2:GetMember", + "inspector2:ListAccountPermissions", + "inspector2:ListCoverage", + "inspector2:ListCoverageStatistics", + "inspector2:ListDelegatedAdminAccounts", + "inspector2:ListFilters", + "inspector2:ListFindings", + "inspector2:ListFindingAggregations", + "inspector2:GetFindingsReportStatus", + "inspector2:ListTagsForResource", + "inspector2:ListUsageTotals", "iot:Describe*", "iot:GetPolicy", "iot:GetPolicyVersion", "iot:List*", + "kafka:Describe*", + "kafka:List*", + "kafka-cluster:Describe*", + "kafkaconnect:Describe*", + "kafkaconnect:List*", + "kendra:ListIndices", + "kinesis:DescribeLimits", "kinesis:DescribeStream", + "kinesis:DescribeStreamConsumer", + "kinesis:DescribeStreamSummary", + "kinesis:ListStreamConsumers", "kinesis:ListStreams", "kinesis:ListTagsForStream", "kinesisanalytics:ListApplications", @@ -123027,23 +125905,41 @@ "kms:List*", "lambda:GetAccountSettings", "lambda:GetFunctionConfiguration", + "lambda:GetFunctionEventInvokeConfig", "lambda:GetLayerVersionPolicy", "lambda:GetPolicy", "lambda:List*", + "lex:ListBots", "license-manager:List*", "lightsail:GetInstances", "lightsail:GetLoadBalancers", "logs:Describe*", "logs:ListTagsLogGroup", "machinelearning:DescribeMLModels", + "managedblockchain:ListNetworks", "mediaconnect:Describe*", "mediaconnect:List*", + "mediapackage:DescribeOriginEndpoint", + "mediapackage:ListOriginEndpoints", "mediastore:GetContainerPolicy", + "mediastore:GetCorsPolicy", "mediastore:ListContainers", - "opsworks:DescribeStacks", + "mq:DescribeBroker", + "mq:DescribeBrokerEngineTypes", + "mq:DescribeBrokerInstanceOptions", + "mq:DescribeConfiguration", + "mq:DescribeConfigurationRevision", + "mq:DescribeUser", + "mq:ListBrokers", + "mq:ListConfigurationRevisions", + "mq:ListConfigurations", + "mq:ListTags", + "mq:ListUsers", + "network-firewall:ListFirewalls", "opsworks-cm:DescribeServers", - "organizations:List*", + "opsworks:DescribeStacks", "organizations:Describe*", + "organizations:List*", "quicksight:Describe*", "quicksight:List*", "ram:List*", @@ -123062,8 +125958,8 @@ "route53domains:ListDomains", "route53domains:ListOperations", "route53domains:ListTagsForDomain", - "route53resolver:List*", "route53resolver:Get*", + "route53resolver:List*", "s3:GetAccelerateConfiguration", "s3:GetAccessPoint", "s3:GetAccessPointPolicy", @@ -123082,37 +125978,75 @@ "s3:ListAllMyBuckets", "sagemaker:Describe*", "sagemaker:List*", + "schemas:DescribeCodeBinding", + "schemas:DescribeDiscoverer", + "schemas:DescribeRegistry", + "schemas:DescribeSchema", + "schemas:ListDiscoverers", + "schemas:ListRegistries", + "schemas:ListSchemaVersions", + "schemas:ListSchemas", + "schemas:ListTagsForResource", "sdb:DomainMetadata", "sdb:ListDomains", + "secretsmanager:DescribeSecret", "secretsmanager:GetResourcePolicy", - "secretsmanager:ListSecrets", "secretsmanager:ListSecretVersionIds", + "secretsmanager:ListSecrets", "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", "serverlessrepo:List*", + "servicequotas:GetAWSDefaultServiceQuota", + "servicequotas:GetAssociationForServiceQuotaTemplate", + "servicequotas:GetRequestedServiceQuotaChange", + "servicequotas:GetServiceQuota", + "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", + "servicequotas:ListAWSDefaultServiceQuotas", + "servicequotas:ListRequestedServiceQuotaChangeHistory", + "servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota", + "servicequotas:ListServiceQuotaIncreaseRequestsInTemplate", + "servicequotas:ListServiceQuotas", + "servicequotas:ListServices", + "servicequotas:ListTagsForResource", + "ses:Describe*", "ses:GetIdentityDkimAttributes", "ses:GetIdentityPolicies", "ses:GetIdentityVerificationAttributes", + "ses:ListConfigurationSets", "ses:ListIdentities", "ses:ListIdentityPolicies", + "ses:ListReceiptRuleSets", "ses:ListVerifiedEmailAddresses", "shield:Describe*", "shield:List*", "snowball:ListClusters", "snowball:ListJobs", "sns:GetTopicAttributes", + "sns:ListSubscriptions", "sns:ListSubscriptionsByTopic", "sns:ListTagsForResource", "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListDeadLetterSourceQueues", - "sqs:ListQueues", "sqs:ListQueueTags", + "sqs:ListQueues", "ssm:Describe*", "ssm:GetAutomationExecution", + "ssm:ListAssociationVersions", + "ssm:ListAssociations", + "ssm:ListCommands", + "ssm:ListComplianceItems", + "ssm:ListComplianceSummaries", + "ssm:ListDocumentMetadataHistory", + "ssm:ListDocumentVersions", "ssm:ListDocuments", + "ssm:ListInventoryEntries", + "ssm:ListOpsMetadata", + "ssm:ListResourceComplianceSummaries", + "ssm:ListResourceDataSync", + "ssm:ListTagsForResource", "sso:DescribePermissionsPolicies", "sso:List*", "states:ListStateMachines", @@ -123131,15 +126065,24 @@ "storagegateway:DescribeVTLDevices", "storagegateway:DescribeWorkingStorage", "storagegateway:List*", + "sts:GetAccessKeyInfo", + "support:DescribeTrustedAdvisorCheckRefreshStatuses", + "support:DescribeTrustedAdvisorCheckResult", + "support:DescribeTrustedAdvisorCheckSummaries", + "support:DescribeTrustedAdvisorChecks", "tag:GetResources", "tag:GetTagKeys", "transfer:Describe*", "transfer:List*", "translate:List*", "trustedadvisor:Describe*", + "waf-regional:GetWebACL", + "waf-regional:ListResourcesForWebACL", + "waf-regional:ListTagsForResource", + "waf-regional:ListWebACLs", "waf:GetWebACL", - "waf:ListWebACLs", "waf:ListTagsForResource", + "waf:ListWebACLs", "wafv2:GetWebACL", "wafv2:ListAvailableManagedRuleGroups", "wafv2:ListIPSets", @@ -123149,44 +126092,15 @@ "wafv2:ListRuleGroups", "wafv2:ListTagsForResource", "wafv2:ListWebACLs", - "waf-regional:GetWebACL", - "waf-regional:ListResourcesForWebACL", - "waf-regional:ListTagsForResource", - "waf-regional:ListWebACLs", + "workdocs:DescribeResourcePermissions", "workspaces:Describe*", - "cloudsearch:DescribeDomainEndpointOptions", - "cloudwatch:ListTagsForResource", - "detective:ListGraphs", - "detective:ListMembers", - "detective:GetGraphIngestState", - "dynamodb:ListTagsOfResource", - "ec2:DescribeTransitGatewayAttachments", - "ec2:DescribeTransitGatewayMulticastDomains", - "ec2:DescribeTransitGatewayPeeringAttachments", - "ec2:DescribeTransitGatewayRouteTables", - "ec2:DescribeTransitGateways", - "ec2:DescribeTransitGatewayVpcAttachments", - "ec2:GetManagedPrefixListAssociations", - "ec2:GetManagedPrefixListEntries", - "ecr:DescribeImages", - "ecr:GetLifecyclePolicy", - "ecr:ListTagsForResource", - "eks:DescribeNodeGroup", - "eks:ListNodeGroups", - "elasticache:ListTagsForResource", - "elasticbeanstalk:DescribeApplications", - "elasticbeanstalk:ListTagsForResource", - "elasticmapreduce:GetBlockPublicAccessConfiguration", - "es:ListElasticsearchInstanceTypeDetails", - "es:ListElasticsearchVersions", - "es:ListTags", - "events:TestEventPattern", - "glue:GetDataCatalogEncryptionSettings", - "glue:GetDevEndpoints", - "guardduty:DescribePublishingDestination", - "secretsmanager:DescribeSecret", - "sns:ListTagsForResource", - "ssm:ListTagsForResource" + "xray:GetEncryptionConfig", + "xray:GetGroup", + "xray:GetGroups", + "xray:GetSamplingRules", + "xray:GetSamplingTargets", + "xray:GetTraceSummaries", + "xray:ListTagsForResource" ] }, { @@ -123196,9 +126110,9 @@ ], "Resource": [ "arn:aws:apigateway:*::/apis", + "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/apis/*/stages", "arn:aws:apigateway:*::/apis/*/stages/*", - "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/clientcertificates/*", "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/authorizers", @@ -123216,8 +126130,8 @@ ] } }, - "v36": { - "createdDate": "2022-10-06T19:49:40.000Z", + "v37": { + "createdDate": "2022-11-19T01:02:40.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -123225,6 +126139,7 @@ "Effect": "Allow", "Resource": "*", "Action": [ + "a4b:ListSkills", "access-analyzer:GetAnalyzedResource", "access-analyzer:GetAnalyzer", "access-analyzer:GetArchiveRule", @@ -123243,6 +126158,7 @@ "airflow:ListEnvironments", "application-autoscaling:Describe*", "appmesh:Describe*", + "appsync:GetApiCache", "appmesh:List*", "appsync:List*", "athena:GetWorkGroup", @@ -123277,6 +126193,8 @@ "cloudtrail:LookupEvents", "cloudwatch:Describe*", "cloudwatch:ListTagsForResource", + "codeartifact:GetRepositoryPermissionsPolicy", + "codeartifact:ListRepositories", "codebuild:BatchGetProjects", "codebuild:ListProjects", "codecommit:BatchGetRepositories", @@ -123347,8 +126265,11 @@ "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "ec2:Describe*", + "ec2:GetEbsEncryptionByDefault", "ec2:GetManagedPrefixListAssociations", "ec2:GetManagedPrefixListEntries", + "ec2:GetNetworkInsightsAccessScopeAnalysisFindings", + "ec2:GetNetworkInsightsAccessScopeContent", "ec2:GetTransitGatewayAttachmentPropagations", "ec2:GetTransitGatewayMulticastDomainAssociations", "ec2:GetTransitGatewayPrefixListReferences", @@ -123390,6 +126311,7 @@ "elasticmapreduce:ListSecurityConfigurations", "elasticloadbalancing:Describe*", "es:Describe*", + "es:GetCompatibleVersions", "es:ListDomainNames", "es:ListElasticsearchInstanceTypeDetails", "es:ListElasticsearchVersions", @@ -123452,11 +126374,14 @@ "iot:GetPolicy", "iot:GetPolicyVersion", "iot:List*", + "iotsitewise:DescribeGatewayCapabilityConfiguration", + "iotsitewise:ListGateways", "kafka:Describe*", "kafka:List*", "kafka-cluster:Describe*", "kafkaconnect:Describe*", "kafkaconnect:List*", + "kendra:DescribeIndex", "kendra:ListIndices", "kinesis:DescribeLimits", "kinesis:DescribeStream", @@ -123475,6 +126400,7 @@ "lambda:GetLayerVersionPolicy", "lambda:GetPolicy", "lambda:List*", + "lex:DescribeBot", "lex:ListBots", "license-manager:List*", "lightsail:GetInstances", @@ -123485,6 +126411,7 @@ "managedblockchain:ListNetworks", "mediaconnect:Describe*", "mediaconnect:List*", + "medialive:ListChannels", "mediapackage:DescribeOriginEndpoint", "mediapackage:ListOriginEndpoints", "mediastore:GetContainerPolicy", @@ -123506,6 +126433,10 @@ "opsworks:DescribeStacks", "organizations:Describe*", "organizations:List*", + "qldb:DescribeJournalS3Export", + "qldb:DescribeLedger", + "qldb:ListJournalS3Exports", + "qldb:ListJournalS3ExportsForLedger", "quicksight:Describe*", "quicksight:List*", "ram:List*", @@ -123548,6 +126479,7 @@ "schemas:DescribeDiscoverer", "schemas:DescribeRegistry", "schemas:DescribeSchema", + "schemas:GetResourcePolicy", "schemas:ListDiscoverers", "schemas:ListRegistries", "schemas:ListSchemaVersions", @@ -123613,8 +126545,11 @@ "ssm:ListResourceComplianceSummaries", "ssm:ListResourceDataSync", "ssm:ListTagsForResource", + "sso:DescribeAccountAssignmentCreationStatus", "sso:DescribePermissionsPolicies", + "sso:DescribePermissionSet", "sso:List*", + "states:DescribeStateMachine", "states:ListStateMachines", "storagegateway:DescribeBandwidthRateLimit", "storagegateway:DescribeCache", @@ -123679,7 +126614,9 @@ "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/apis/*/stages", "arn:aws:apigateway:*::/apis/*/stages/*", + "arn:aws:apigateway:*::/clientcertificates", "arn:aws:apigateway:*::/clientcertificates/*", + "arn:aws:apigateway:*::/domainnames", "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/authorizers", "arn:aws:apigateway:*::/restapis/*/authorizers/*", @@ -123696,8 +126633,8 @@ ] } }, - "v37": { - "createdDate": "2022-11-19T01:02:40.000Z", + "v35": { + "createdDate": "2021-04-14T20:28:28.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -123705,7 +126642,6 @@ "Effect": "Allow", "Resource": "*", "Action": [ - "a4b:ListSkills", "access-analyzer:GetAnalyzedResource", "access-analyzer:GetAnalyzer", "access-analyzer:GetArchiveRule", @@ -123715,24 +126651,17 @@ "access-analyzer:ListArchiveRules", "access-analyzer:ListFindings", "access-analyzer:ListTagsForResource", - "acm-pca:DescribeCertificateAuthority", - "acm-pca:DescribeCertificateAuthorityAuditReport", - "acm-pca:ListCertificateAuthorities", "acm-pca:ListPermissions", "acm:Describe*", "acm:List*", - "airflow:ListEnvironments", "application-autoscaling:Describe*", "appmesh:Describe*", - "appsync:GetApiCache", "appmesh:List*", "appsync:List*", "athena:GetWorkGroup", "athena:List*", "autoscaling-plans:DescribeScalingPlans", "autoscaling:Describe*", - "backup:DescribeRegionSettings", - "backup:ListBackupVaults", "batch:DescribeComputeEnvironments", "batch:DescribeJobDefinitions", "chime:List*", @@ -123753,15 +126682,11 @@ "cloudsearch:DescribeServiceAccessPolicies", "cloudtrail:DescribeTrails", "cloudtrail:GetEventSelectors", - "cloudtrail:GetTrail", "cloudtrail:GetTrailStatus", "cloudtrail:ListTags", "cloudtrail:LookupEvents", "cloudwatch:Describe*", "cloudwatch:ListTagsForResource", - "codeartifact:GetRepositoryPermissionsPolicy", - "codeartifact:ListRepositories", - "codebuild:BatchGetProjects", "codebuild:ListProjects", "codecommit:BatchGetRepositories", "codecommit:GetBranch", @@ -123779,10 +126704,14 @@ "codepipeline:ListPipelines", "codestar:Describe*", "codestar:List*", - "cognito-identity:Describe*", "cognito-identity:ListIdentityPools", - "cognito-identity:ListTagsForResource", - "cognito-idp:Describe*", + "cognito-idp:DescribeIdentityProvider", + "cognito-idp:DescribeResourceServer", + "cognito-idp:DescribeRiskConfiguration", + "cognito-idp:DescribeUserImportJob", + "cognito-idp:DescribeUserPool", + "cognito-idp:DescribeUserPoolClient", + "cognito-idp:DescribeUserPoolDomain", "cognito-idp:ListDevices", "cognito-idp:ListGroups", "cognito-idp:ListIdentityProviders", @@ -123831,11 +126760,14 @@ "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "ec2:Describe*", - "ec2:GetEbsEncryptionByDefault", + "ec2:DescribeTransitGatewayAttachments", + "ec2:DescribeTransitGatewayMulticastDomains", + "ec2:DescribeTransitGatewayPeeringAttachments", + "ec2:DescribeTransitGatewayRouteTables", + "ec2:DescribeTransitGatewayVpcAttachments", + "ec2:DescribeTransitGateways", "ec2:GetManagedPrefixListAssociations", "ec2:GetManagedPrefixListEntries", - "ec2:GetNetworkInsightsAccessScopeAnalysisFindings", - "ec2:GetNetworkInsightsAccessScopeContent", "ec2:GetTransitGatewayAttachmentPropagations", "ec2:GetTransitGatewayMulticastDomainAssociations", "ec2:GetTransitGatewayPrefixListReferences", @@ -123875,9 +126807,7 @@ "elasticmapreduce:ListClusters", "elasticmapreduce:ListInstances", "elasticmapreduce:ListSecurityConfigurations", - "elasticloadbalancing:Describe*", "es:Describe*", - "es:GetCompatibleVersions", "es:ListDomainNames", "es:ListElasticsearchInstanceTypeDetails", "es:ListElasticsearchVersions", @@ -123889,14 +126819,12 @@ "firehose:List*", "fms:ListComplianceStatus", "fms:ListPolicies", - "forecast:ListDatasets", "fsx:Describe*", "fsx:List*", "gamelift:ListBuilds", "gamelift:ListFleets", "glacier:DescribeVault", "glacier:GetVaultAccessPolicy", - "glacier:GetVaultLock", "glacier:ListVaults", "globalaccelerator:Describe*", "globalaccelerator:List*", @@ -123905,7 +126833,6 @@ "glue:GetDatabases", "glue:GetDevEndpoints", "glue:GetJobs", - "glue:GetResourcePolicy", "greengrass:List*", "guardduty:DescribePublishingDestination", "guardduty:Get*", @@ -123920,35 +126847,10 @@ "inspector:Get*", "inspector:List*", "inspector:Preview*", - "inspector2:BatchGetAccountStatus", - "inspector2:BatchGetFreeTrialInfo", - "inspector2:DescribeOrganizationConfiguration", - "inspector2:GetDelegatedAdminAccount", - "inspector2:GetFindingsReportStatus", - "inspector2:GetMember", - "inspector2:ListAccountPermissions", - "inspector2:ListCoverage", - "inspector2:ListCoverageStatistics", - "inspector2:ListDelegatedAdminAccounts", - "inspector2:ListFilters", - "inspector2:ListFindings", - "inspector2:ListFindingAggregations", - "inspector2:GetFindingsReportStatus", - "inspector2:ListTagsForResource", - "inspector2:ListUsageTotals", "iot:Describe*", "iot:GetPolicy", "iot:GetPolicyVersion", "iot:List*", - "iotsitewise:DescribeGatewayCapabilityConfiguration", - "iotsitewise:ListGateways", - "kafka:Describe*", - "kafka:List*", - "kafka-cluster:Describe*", - "kafkaconnect:Describe*", - "kafkaconnect:List*", - "kendra:DescribeIndex", - "kendra:ListIndices", "kinesis:DescribeLimits", "kinesis:DescribeStream", "kinesis:DescribeStreamConsumer", @@ -123966,22 +126868,15 @@ "lambda:GetLayerVersionPolicy", "lambda:GetPolicy", "lambda:List*", - "lex:DescribeBot", - "lex:ListBots", "license-manager:List*", "lightsail:GetInstances", "lightsail:GetLoadBalancers", "logs:Describe*", "logs:ListTagsLogGroup", "machinelearning:DescribeMLModels", - "managedblockchain:ListNetworks", "mediaconnect:Describe*", "mediaconnect:List*", - "medialive:ListChannels", - "mediapackage:DescribeOriginEndpoint", - "mediapackage:ListOriginEndpoints", "mediastore:GetContainerPolicy", - "mediastore:GetCorsPolicy", "mediastore:ListContainers", "mq:DescribeBroker", "mq:DescribeBrokerEngineTypes", @@ -123999,10 +126894,6 @@ "opsworks:DescribeStacks", "organizations:Describe*", "organizations:List*", - "qldb:DescribeJournalS3Export", - "qldb:DescribeLedger", - "qldb:ListJournalS3Exports", - "qldb:ListJournalS3ExportsForLedger", "quicksight:Describe*", "quicksight:List*", "ram:List*", @@ -124045,7 +126936,6 @@ "schemas:DescribeDiscoverer", "schemas:DescribeRegistry", "schemas:DescribeSchema", - "schemas:GetResourcePolicy", "schemas:ListDiscoverers", "schemas:ListRegistries", "schemas:ListSchemaVersions", @@ -124074,14 +126964,11 @@ "servicequotas:ListServiceQuotas", "servicequotas:ListServices", "servicequotas:ListTagsForResource", - "ses:Describe*", "ses:GetIdentityDkimAttributes", "ses:GetIdentityPolicies", "ses:GetIdentityVerificationAttributes", - "ses:ListConfigurationSets", "ses:ListIdentities", "ses:ListIdentityPolicies", - "ses:ListReceiptRuleSets", "ses:ListVerifiedEmailAddresses", "shield:Describe*", "shield:List*", @@ -124111,11 +126998,8 @@ "ssm:ListResourceComplianceSummaries", "ssm:ListResourceDataSync", "ssm:ListTagsForResource", - "sso:DescribeAccountAssignmentCreationStatus", "sso:DescribePermissionsPolicies", - "sso:DescribePermissionSet", "sso:List*", - "states:DescribeStateMachine", "states:ListStateMachines", "storagegateway:DescribeBandwidthRateLimit", "storagegateway:DescribeCache", @@ -124132,7 +127016,6 @@ "storagegateway:DescribeVTLDevices", "storagegateway:DescribeWorkingStorage", "storagegateway:List*", - "sts:GetAccessKeyInfo", "support:DescribeTrustedAdvisorCheckRefreshStatuses", "support:DescribeTrustedAdvisorCheckResult", "support:DescribeTrustedAdvisorCheckSummaries", @@ -124166,7 +127049,6 @@ "xray:GetGroups", "xray:GetSamplingRules", "xray:GetSamplingTargets", - "xray:GetTraceSummaries", "xray:ListTagsForResource" ] }, @@ -124180,9 +127062,7 @@ "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/apis/*/stages", "arn:aws:apigateway:*::/apis/*/stages/*", - "arn:aws:apigateway:*::/clientcertificates", "arn:aws:apigateway:*::/clientcertificates/*", - "arn:aws:apigateway:*::/domainnames", "arn:aws:apigateway:*::/restapis", "arn:aws:apigateway:*::/restapis/*/authorizers", "arn:aws:apigateway:*::/restapis/*/authorizers/*", @@ -124199,15 +127079,17 @@ ] } }, - "v35": { - "createdDate": "2021-04-14T20:28:28.000Z", + "v38": { + "createdDate": "2023-06-07T18:56:25.000Z", "document": { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Resource": "*", + "Sid": "BaseSecurityAuditStatement", "Action": [ + "a4b:ListSkills", "access-analyzer:GetAnalyzedResource", "access-analyzer:GetAnalyzer", "access-analyzer:GetArchiveRule", @@ -124217,19 +127099,59 @@ "access-analyzer:ListArchiveRules", "access-analyzer:ListFindings", "access-analyzer:ListTagsForResource", + "acm-pca:DescribeCertificateAuthority", + "acm-pca:DescribeCertificateAuthorityAuditReport", + "acm-pca:GetPolicy", + "acm-pca:ListCertificateAuthorities", "acm-pca:ListPermissions", + "acm-pca:ListTags", "acm:Describe*", "acm:List*", + "airflow:ListEnvironments", + "appflow:ListFlows", + "appflow:ListTagsForResource", "application-autoscaling:Describe*", "appmesh:Describe*", "appmesh:List*", + "apprunner:DescribeAutoScalingConfiguration", + "apprunner:DescribeCustomDomains", + "apprunner:DescribeObservabilityConfiguration", + "apprunner:DescribeService", + "apprunner:DescribeVpcConnector", + "apprunner:DescribeVpcIngressConnection", + "apprunner:ListAutoScalingConfigurations", + "apprunner:ListConnections", + "apprunner:ListObservabilityConfigurations", + "apprunner:ListOperations", + "apprunner:ListServices", + "apprunner:ListTagsForResource", + "apprunner:ListVpcConnectors", + "apprunner:ListVpcIngressConnections", + "appsync:GetApiCache", "appsync:List*", "athena:GetWorkGroup", "athena:List*", + "auditmanager:GetAccountStatus", + "auditmanager:ListAssessmentControlInsightsByControlDomain", + "auditmanager:ListAssessmentFrameworks", + "auditmanager:ListAssessmentFrameworkShareRequests", + "auditmanager:ListAssessmentReports", + "auditmanager:ListAssessments", + "auditmanager:ListControlDomainInsights", + "auditmanager:ListControlDomainInsightsByAssessment", + "auditmanager:ListControlInsightsByControlDomain", + "auditmanager:ListControls", + "auditmanager:ListNotifications", + "auditmanager:ListTagsForResource", "autoscaling-plans:DescribeScalingPlans", "autoscaling:Describe*", + "backup:DescribeRegionSettings", + "backup:GetBackupVaultAccessPolicy", + "backup:ListBackupVaults", "batch:DescribeComputeEnvironments", "batch:DescribeJobDefinitions", + "braket:SearchJobs", + "braket:SearchQuantumTasks", "chime:List*", "cloud9:Describe*", "cloud9:ListEnvironments", @@ -124240,19 +127162,21 @@ "cloudformation:ListStack*", "cloudfront:Get*", "cloudfront:List*", - "cloudhsm:ListHapgs", - "cloudhsm:ListHsms", - "cloudhsm:ListLunaClients", "cloudsearch:DescribeDomainEndpointOptions", "cloudsearch:DescribeDomains", "cloudsearch:DescribeServiceAccessPolicies", "cloudtrail:DescribeTrails", "cloudtrail:GetEventSelectors", + "cloudtrail:GetTrail", "cloudtrail:GetTrailStatus", "cloudtrail:ListTags", "cloudtrail:LookupEvents", "cloudwatch:Describe*", "cloudwatch:ListTagsForResource", + "codeartifact:GetDomainPermissionsPolicy", + "codeartifact:GetRepositoryPermissionsPolicy", + "codeartifact:ListRepositories", + "codebuild:BatchGetProjects", "codebuild:ListProjects", "codecommit:BatchGetRepositories", "codecommit:GetBranch", @@ -124270,14 +127194,11 @@ "codepipeline:ListPipelines", "codestar:Describe*", "codestar:List*", + "cognito-identity:Describe*", + "cognito-identity:GetIdentityPoolRoles", "cognito-identity:ListIdentityPools", - "cognito-idp:DescribeIdentityProvider", - "cognito-idp:DescribeResourceServer", - "cognito-idp:DescribeRiskConfiguration", - "cognito-idp:DescribeUserImportJob", - "cognito-idp:DescribeUserPool", - "cognito-idp:DescribeUserPoolClient", - "cognito-idp:DescribeUserPoolDomain", + "cognito-identity:ListTagsForResource", + "cognito-idp:Describe*", "cognito-idp:ListDevices", "cognito-idp:ListGroups", "cognito-idp:ListIdentityProviders", @@ -124292,12 +127213,18 @@ "cognito-sync:List*", "comprehend:Describe*", "comprehend:List*", + "comprehendmedical:ListICD10CMInferenceJobs", + "comprehendmedical:ListPHIDetectionJobs", + "comprehendmedical:ListRxNormInferenceJobs", + "comprehendmedical:ListSNOMEDCTInferenceJobs", "config:BatchGetAggregateResourceConfig", "config:BatchGetResourceConfig", "config:Deliver*", "config:Describe*", "config:Get*", "config:List*", + "connect:ListInstances", + "dataexchange:ListDataSets", "datapipeline:DescribeObjects", "datapipeline:DescribePipelines", "datapipeline:EvaluateExpression", @@ -124309,12 +127236,15 @@ "datasync:List*", "dax:Describe*", "dax:ListTags", + "deepracer:ListModels", "detective:GetGraphIngestState", "detective:ListGraphs", "detective:ListMembers", + "devicefarm:ListProjects", "directconnect:Describe*", "dms:Describe*", "dms:ListTagsForResource", + "docdb-elastic:ListClusters", "ds:DescribeDirectories", "dynamodb:DescribeContinuousBackups", "dynamodb:DescribeGlobalTable", @@ -124326,54 +127256,65 @@ "dynamodb:ListTables", "dynamodb:ListTagsOfResource", "ec2:Describe*", - "ec2:DescribeTransitGatewayAttachments", - "ec2:DescribeTransitGatewayMulticastDomains", - "ec2:DescribeTransitGatewayPeeringAttachments", - "ec2:DescribeTransitGatewayRouteTables", - "ec2:DescribeTransitGatewayVpcAttachments", - "ec2:DescribeTransitGateways", + "ec2:GetEbsEncryptionByDefault", "ec2:GetManagedPrefixListAssociations", "ec2:GetManagedPrefixListEntries", + "ec2:GetNetworkInsightsAccessScopeAnalysisFindings", + "ec2:GetNetworkInsightsAccessScopeContent", "ec2:GetTransitGatewayAttachmentPropagations", "ec2:GetTransitGatewayMulticastDomainAssociations", "ec2:GetTransitGatewayPrefixListReferences", "ec2:GetTransitGatewayRouteTableAssociations", "ec2:GetTransitGatewayRouteTablePropagations", - "ecr-public:DescribeImageTags", + "ec2:SearchTransitGatewayRoutes", "ecr-public:DescribeImages", + "ecr-public:DescribeImageTags", "ecr-public:DescribeRegistries", "ecr-public:DescribeRepositories", "ecr-public:GetRegistryCatalogData", "ecr-public:GetRepositoryCatalogData", "ecr-public:GetRepositoryPolicy", - "ecr:DescribeImageScanFindings", + "ecr-public:ListTagsForResource", + "ecr:BatchGetRepositoryScanningConfiguration", "ecr:DescribeImages", + "ecr:DescribeImageScanFindings", "ecr:DescribeRepositories", "ecr:GetLifecyclePolicy", + "ecr:GetRegistryScanningConfiguration", "ecr:GetRepositoryPolicy", "ecr:ListImages", "ecr:ListTagsForResource", "ecs:Describe*", "ecs:List*", "eks:DescribeCluster", + "eks:DescribeFargateProfile", "eks:DescribeNodeGroup", "eks:ListClusters", + "eks:ListFargateProfiles", "eks:ListNodeGroups", + "elastic-inference:DescribeAccelerators", "elasticache:Describe*", "elasticache:ListTagsForResource", "elasticbeanstalk:Describe*", - "elasticbeanstalk:DescribeApplications", "elasticbeanstalk:ListTagsForResource", + "elasticfilesystem:DescribeAccountPreferences", + "elasticfilesystem:DescribeBackupPolicy", + "elasticfilesystem:DescribeFileSystemPolicy", "elasticfilesystem:DescribeFileSystems", - "elasticfilesystem:DescribeMountTargetSecurityGroups", + "elasticfilesystem:DescribeLifecycleConfiguration", "elasticfilesystem:DescribeMountTargets", + "elasticfilesystem:DescribeMountTargetSecurityGroups", + "elasticfilesystem:DescribeReplicationConfigurations", + "elasticfilesystem:DescribeTags", "elasticloadbalancing:Describe*", "elasticmapreduce:Describe*", "elasticmapreduce:GetBlockPublicAccessConfiguration", "elasticmapreduce:ListClusters", "elasticmapreduce:ListInstances", "elasticmapreduce:ListSecurityConfigurations", + "elastictranscoder:ListPipelines", "es:Describe*", + "es:GetCompatibleVersions", "es:ListDomainNames", "es:ListElasticsearchInstanceTypeDetails", "es:ListElasticsearchVersions", @@ -124381,28 +127322,42 @@ "events:Describe*", "events:List*", "events:TestEventPattern", + "finspace:ListEnvironments", "firehose:Describe*", "firehose:List*", "fms:ListComplianceStatus", "fms:ListPolicies", + "forecast:ListDatasets", + "frauddetector:GetDetectors", "fsx:Describe*", "fsx:List*", "gamelift:ListBuilds", "gamelift:ListFleets", + "geo:ListMaps", "glacier:DescribeVault", "glacier:GetVaultAccessPolicy", + "glacier:GetVaultLock", "glacier:ListVaults", "globalaccelerator:Describe*", "globalaccelerator:List*", "glue:GetCrawlers", - "glue:GetDataCatalogEncryptionSettings", "glue:GetDatabases", + "glue:GetDataCatalogEncryptionSettings", "glue:GetDevEndpoints", "glue:GetJobs", + "glue:GetResourcePolicy", + "glue:GetSecurityConfigurations", + "grafana:ListWorkspaces", "greengrass:List*", "guardduty:DescribePublishingDestination", "guardduty:Get*", "guardduty:List*", + "health:DescribeAffectedEntities", + "health:DescribeEntityAggregates", + "health:DescribeEventAggregates", + "health:DescribeEvents", + "health:DescribeEventTypes", + "honeycode:ListTables", "iam:GenerateCredentialReport", "iam:GenerateServiceLastAccessedDetails", "iam:Get*", @@ -124413,18 +127368,59 @@ "inspector:Get*", "inspector:List*", "inspector:Preview*", + "inspector2:BatchGetAccountStatus", + "inspector2:BatchGetFreeTrialInfo", + "inspector2:DescribeOrganizationConfiguration", + "inspector2:GetConfiguration", + "inspector2:GetDelegatedAdminAccount", + "inspector2:GetFindingsReportStatus", + "inspector2:GetMember", + "inspector2:ListAccountPermissions", + "inspector2:ListCoverage", + "inspector2:ListCoverageStatistics", + "inspector2:ListDelegatedAdminAccounts", + "inspector2:ListFilters", + "inspector2:ListFindingAggregations", + "inspector2:ListFindings", + "inspector2:ListTagsForResource", + "inspector2:ListUsageTotals", "iot:Describe*", "iot:GetPolicy", "iot:GetPolicyVersion", "iot:List*", + "iotanalytics:ListChannels", + "iotevents:ListInputs", + "iotsitewise:DescribeGatewayCapabilityConfiguration", + "iotsitewise:ListAssetModels", + "iotsitewise:ListGateways", + "kafka-cluster:Describe*", + "kafka:Describe*", + "kafka:GetBootstrapBrokers", + "kafka:GetCompatibleKafkaVersions", + "kafka:List*", + "kafkaconnect:Describe*", + "kafkaconnect:List*", + "kendra:DescribeIndex", + "kendra:ListIndices", "kinesis:DescribeLimits", "kinesis:DescribeStream", "kinesis:DescribeStreamConsumer", "kinesis:DescribeStreamSummary", + "kinesis:ListShards", "kinesis:ListStreamConsumers", "kinesis:ListStreams", "kinesis:ListTagsForStream", "kinesisanalytics:ListApplications", + "kinesisvideo:DescribeEdgeConfiguration", + "kinesisvideo:DescribeMappedResourceConfiguration", + "kinesisvideo:DescribeMediaStorageConfiguration", + "kinesisvideo:DescribeNotificationConfiguration", + "kinesisvideo:DescribeSignalingChannel", + "kinesisvideo:DescribeStream", + "kinesisvideo:ListSignalingChannels", + "kinesisvideo:ListStreams", + "kinesisvideo:ListTagsForResource", + "kinesisvideo:ListTagsForStream", "kms:Describe*", "kms:Get*", "kms:List*", @@ -124434,16 +127430,31 @@ "lambda:GetLayerVersionPolicy", "lambda:GetPolicy", "lambda:List*", + "lex:DescribeBot", + "lex:DescribeResourcePolicy", + "lex:ListBots", "license-manager:List*", + "lightsail:GetDisks", + "lightsail:GetDiskSnapshots", "lightsail:GetInstances", "lightsail:GetLoadBalancers", "logs:Describe*", "logs:ListTagsLogGroup", + "lookoutequipment:ListDatasets", + "lookoutmetrics:ListAnomalyDetectors", "machinelearning:DescribeMLModels", + "managedblockchain:ListNetworks", "mediaconnect:Describe*", "mediaconnect:List*", + "medialive:ListChannels", + "mediapackage-vod:DescribePackagingGroup", + "mediapackage-vod:ListPackagingGroups", + "mediapackage:DescribeOriginEndpoint", + "mediapackage:ListOriginEndpoints", "mediastore:GetContainerPolicy", + "mediastore:GetCorsPolicy", "mediastore:ListContainers", + "memorydb:DescribeClusters", "mq:DescribeBroker", "mq:DescribeBrokerEngineTypes", "mq:DescribeBrokerInstanceOptions", @@ -124455,11 +127466,25 @@ "mq:ListConfigurations", "mq:ListTags", "mq:ListUsers", + "network-firewall:DescribeFirewall", + "network-firewall:DescribeFirewallPolicy", + "network-firewall:DescribeLoggingConfiguration", + "network-firewall:DescribeResourcePolicy", + "network-firewall:DescribeRuleGroup", + "network-firewall:ListFirewallPolicies", "network-firewall:ListFirewalls", + "network-firewall:ListRuleGroups", "opsworks-cm:DescribeServers", "opsworks:DescribeStacks", "organizations:Describe*", "organizations:List*", + "personalize:DescribeDatasetGroup", + "personalize:ListDatasetGroups", + "qldb:DescribeJournalS3Export", + "qldb:DescribeLedger", + "qldb:ListJournalS3Exports", + "qldb:ListJournalS3ExportsForLedger", + "qldb:ListLedgers", "quicksight:Describe*", "quicksight:List*", "ram:List*", @@ -124469,6 +127494,7 @@ "redshift:Describe*", "rekognition:Describe*", "rekognition:List*", + "resource-groups:ListGroupResources", "robomaker:Describe*", "robomaker:List*", "route53:Get*", @@ -124480,6 +127506,9 @@ "route53domains:ListTagsForDomain", "route53resolver:Get*", "route53resolver:List*", + "s3-outposts:ListEndpoints", + "s3-outposts:ListOutpostsWithS3", + "s3-outposts:ListSharedEndpoints", "s3:GetAccelerateConfiguration", "s3:GetAccessPoint", "s3:GetAccessPointPolicy", @@ -124502,24 +127531,25 @@ "schemas:DescribeDiscoverer", "schemas:DescribeRegistry", "schemas:DescribeSchema", + "schemas:GetResourcePolicy", "schemas:ListDiscoverers", "schemas:ListRegistries", - "schemas:ListSchemaVersions", "schemas:ListSchemas", + "schemas:ListSchemaVersions", "schemas:ListTagsForResource", "sdb:DomainMetadata", "sdb:ListDomains", "secretsmanager:DescribeSecret", "secretsmanager:GetResourcePolicy", - "secretsmanager:ListSecretVersionIds", "secretsmanager:ListSecrets", + "secretsmanager:ListSecretVersionIds", "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", "serverlessrepo:List*", - "servicequotas:GetAWSDefaultServiceQuota", "servicequotas:GetAssociationForServiceQuotaTemplate", + "servicequotas:GetAWSDefaultServiceQuota", "servicequotas:GetRequestedServiceQuotaChange", "servicequotas:GetServiceQuota", "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", @@ -124530,16 +127560,22 @@ "servicequotas:ListServiceQuotas", "servicequotas:ListServices", "servicequotas:ListTagsForResource", + "ses:Describe*", + "ses:GetAccountSendingEnabled", "ses:GetIdentityDkimAttributes", "ses:GetIdentityPolicies", "ses:GetIdentityVerificationAttributes", + "ses:ListConfigurationSets", "ses:ListIdentities", "ses:ListIdentityPolicies", + "ses:ListReceiptRuleSets", "ses:ListVerifiedEmailAddresses", "shield:Describe*", + "shield:GetSubscriptionState", "shield:List*", "snowball:ListClusters", "snowball:ListJobs", + "sns:GetPlatformApplicationAttributes", "sns:GetTopicAttributes", "sns:ListSubscriptions", "sns:ListSubscriptionsByTopic", @@ -124547,25 +127583,28 @@ "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListDeadLetterSourceQueues", - "sqs:ListQueueTags", "sqs:ListQueues", + "sqs:ListQueueTags", "ssm:Describe*", "ssm:GetAutomationExecution", - "ssm:ListAssociationVersions", "ssm:ListAssociations", + "ssm:ListAssociationVersions", "ssm:ListCommands", "ssm:ListComplianceItems", "ssm:ListComplianceSummaries", "ssm:ListDocumentMetadataHistory", - "ssm:ListDocumentVersions", "ssm:ListDocuments", + "ssm:ListDocumentVersions", "ssm:ListInventoryEntries", "ssm:ListOpsMetadata", "ssm:ListResourceComplianceSummaries", "ssm:ListResourceDataSync", "ssm:ListTagsForResource", + "sso:DescribeAccountAssignmentCreationStatus", + "sso:DescribePermissionSet", "sso:DescribePermissionsPolicies", "sso:List*", + "states:DescribeStateMachine", "states:ListStateMachines", "storagegateway:DescribeBandwidthRateLimit", "storagegateway:DescribeCache", @@ -124582,12 +127621,36 @@ "storagegateway:DescribeVTLDevices", "storagegateway:DescribeWorkingStorage", "storagegateway:List*", + "sts:GetAccessKeyInfo", "support:DescribeTrustedAdvisorCheckRefreshStatuses", "support:DescribeTrustedAdvisorCheckResult", - "support:DescribeTrustedAdvisorCheckSummaries", "support:DescribeTrustedAdvisorChecks", + "support:DescribeTrustedAdvisorCheckSummaries", + "synthetics:DescribeCanaries", + "synthetics:DescribeCanariesLastRun", + "synthetics:DescribeRuntimeVersions", + "synthetics:GetCanary", + "synthetics:GetCanaryRuns", + "synthetics:GetGroup", + "synthetics:ListAssociatedGroups", + "synthetics:ListGroupResources", + "synthetics:ListGroups", + "synthetics:ListTagsForResource", "tag:GetResources", "tag:GetTagKeys", + "transcribe:GetCallAnalyticsCategory", + "transcribe:GetMedicalVocabulary", + "transcribe:GetVocabulary", + "transcribe:GetVocabularyFilter", + "transcribe:ListCallAnalyticsCategories", + "transcribe:ListCallAnalyticsJobs", + "transcribe:ListLanguageModels", + "transcribe:ListMedicalTranscriptionJobs", + "transcribe:ListMedicalVocabularies", + "transcribe:ListTagsForResource", + "transcribe:ListTranscriptionJobs", + "transcribe:ListVocabularies", + "transcribe:ListVocabularyFilters", "transfer:Describe*", "transfer:List*", "translate:List*", @@ -124600,6 +127663,7 @@ "waf:ListTagsForResource", "waf:ListWebACLs", "wafv2:GetWebACL", + "wafv2:GetWebACLforResource", "wafv2:ListAvailableManagedRuleGroups", "wafv2:ListIPSets", "wafv2:ListLoggingConfigurations", @@ -124615,27 +127679,53 @@ "xray:GetGroups", "xray:GetSamplingRules", "xray:GetSamplingTargets", + "xray:GetTraceSummaries", "xray:ListTagsForResource" ] }, { "Effect": "Allow", + "Sid": "APIGatewayAccess", "Action": [ "apigateway:GET" ], "Resource": [ "arn:aws:apigateway:*::/apis", + "arn:aws:apigateway:*::/apis/*/authorizers/*", + "arn:aws:apigateway:*::/apis/*/authorizers", + "arn:aws:apigateway:*::/apis/*/cors", + "arn:aws:apigateway:*::/apis/*/deployments/*", + "arn:aws:apigateway:*::/apis/*/deployments", + "arn:aws:apigateway:*::/apis/*/exports/*", + "arn:aws:apigateway:*::/apis/*/integrations/*", + "arn:aws:apigateway:*::/apis/*/integrations", + "arn:aws:apigateway:*::/apis/*/models/*", + "arn:aws:apigateway:*::/apis/*/models", + "arn:aws:apigateway:*::/apis/*/routes/*", "arn:aws:apigateway:*::/apis/*/routes", "arn:aws:apigateway:*::/apis/*/stages", "arn:aws:apigateway:*::/apis/*/stages/*", + "arn:aws:apigateway:*::/clientcertificates", "arn:aws:apigateway:*::/clientcertificates/*", + "arn:aws:apigateway:*::/domainnames", + "arn:aws:apigateway:*::/domainnames/*/apimappings", "arn:aws:apigateway:*::/restapis", - "arn:aws:apigateway:*::/restapis/*/authorizers", "arn:aws:apigateway:*::/restapis/*/authorizers/*", + "arn:aws:apigateway:*::/restapis/*/authorizers", + "arn:aws:apigateway:*::/restapis/*/deployments/*", + "arn:aws:apigateway:*::/restapis/*/deployments", + "arn:aws:apigateway:*::/restapis/*/documentation/parts/*", + "arn:aws:apigateway:*::/restapis/*/documentation/parts", + "arn:aws:apigateway:*::/restapis/*/documentation/versions/*", "arn:aws:apigateway:*::/restapis/*/documentation/versions", - "arn:aws:apigateway:*::/restapis/*/resources", + "arn:aws:apigateway:*::/restapis/*/gatewayresponses/*", + "arn:aws:apigateway:*::/restapis/*/gatewayresponses", + "arn:aws:apigateway:*::/restapis/*/models/*", + "arn:aws:apigateway:*::/restapis/*/models", + "arn:aws:apigateway:*::/restapis/*/requestvalidators", + "arn:aws:apigateway:*::/restapis/*/requestvalidators/*", "arn:aws:apigateway:*::/restapis/*/resources/*", - "arn:aws:apigateway:*::/restapis/*/resources/*/methods/*", + "arn:aws:apigateway:*::/restapis/*/resources", "arn:aws:apigateway:*::/restapis/*/stages", "arn:aws:apigateway:*::/restapis/*/stages/*", "arn:aws:apigateway:*::/tags/*", @@ -124645,8 +127735,8 @@ ] } }, - "v38": { - "createdDate": "2023-06-07T18:56:25.000Z", + "v39": { + "createdDate": "2023-07-20T19:34:47.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -124665,6 +127755,7 @@ "access-analyzer:ListArchiveRules", "access-analyzer:ListFindings", "access-analyzer:ListTagsForResource", + "account:GetAlternateContact", "acm-pca:DescribeCertificateAuthority", "acm-pca:DescribeCertificateAuthorityAuditReport", "acm-pca:GetPolicy", @@ -124738,7 +127829,9 @@ "cloudtrail:ListTags", "cloudtrail:LookupEvents", "cloudwatch:Describe*", + "cloudwatch:GetDashboard", "cloudwatch:ListTagsForResource", + "cloudwatch:ListDashboards", "codeartifact:GetDomainPermissionsPolicy", "codeartifact:GetRepositoryPermissionsPolicy", "codeartifact:ListRepositories", @@ -124858,6 +127951,7 @@ "eks:ListClusters", "eks:ListFargateProfiles", "eks:ListNodeGroups", + "eks:ListUpdates", "elastic-inference:DescribeAccelerators", "elasticache:Describe*", "elasticache:ListTagsForResource", @@ -125301,8 +128395,8 @@ ] } }, - "v39": { - "createdDate": "2023-07-20T19:34:47.000Z", + "v40": { + "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", "Statement": [ @@ -125322,6 +128416,7 @@ "access-analyzer:ListFindings", "access-analyzer:ListTagsForResource", "account:GetAlternateContact", + "account:GetRegionOptStatus", "acm-pca:DescribeCertificateAuthority", "acm-pca:DescribeCertificateAuthorityAuditReport", "acm-pca:GetPolicy", @@ -125448,6 +128543,8 @@ "config:Describe*", "config:Get*", "config:List*", + "config:SelectAggregateResourceConfig", + "config:SelectResourceConfig", "connect:ListInstances", "dataexchange:ListDataSets", "datapipeline:DescribeObjects", @@ -125467,6 +128564,12 @@ "detective:ListMembers", "devicefarm:ListProjects", "directconnect:Describe*", + "discovery:DescribeAgents", + "discovery:DescribeConfigurations", + "discovery:DescribeContinuousExports", + "discovery:DescribeExportConfigurations", + "discovery:DescribeExportTasks", + "discovery:DescribeImportTasks", "dms:Describe*", "dms:ListTagsForResource", "docdb-elastic:ListClusters", @@ -125549,6 +128652,7 @@ "events:List*", "events:TestEventPattern", "finspace:ListEnvironments", + "finspace:ListKxEnvironments", "firehose:Describe*", "firehose:List*", "fms:ListComplianceStatus", @@ -125583,6 +128687,7 @@ "health:DescribeEventAggregates", "health:DescribeEvents", "health:DescribeEventTypes", + "healthlake:ListFHIRDatastores", "honeycode:ListTables", "iam:GenerateCredentialReport", "iam:GenerateServiceLastAccessedDetails", @@ -125616,9 +128721,11 @@ "iot:List*", "iotanalytics:ListChannels", "iotevents:ListInputs", + "iotfleetwise:ListModelManifests", "iotsitewise:DescribeGatewayCapabilityConfiguration", "iotsitewise:ListAssetModels", "iotsitewise:ListGateways", + "iottwinmaker:ListWorkspaces", "kafka-cluster:Describe*", "kafka:Describe*", "kafka:GetBootstrapBrokers", @@ -125668,8 +128775,10 @@ "logs:ListTagsLogGroup", "lookoutequipment:ListDatasets", "lookoutmetrics:ListAnomalyDetectors", + "lookoutvision:ListProjects", "machinelearning:DescribeMLModels", "managedblockchain:ListNetworks", + "mechanicalturk:ListHITs", "mediaconnect:Describe*", "mediaconnect:List*", "medialive:ListChannels", @@ -125700,12 +128809,15 @@ "network-firewall:ListFirewallPolicies", "network-firewall:ListFirewalls", "network-firewall:ListRuleGroups", + "networkmanager:DescribeGlobalNetworks", + "nimble:ListStudios", "opsworks-cm:DescribeServers", "opsworks:DescribeStacks", "organizations:Describe*", "organizations:List*", "personalize:DescribeDatasetGroup", "personalize:ListDatasetGroups", + "private-networks:ListNetworks", "qldb:DescribeJournalS3Export", "qldb:DescribeLedger", "qldb:ListJournalS3Exports", @@ -125713,6 +128825,7 @@ "qldb:ListLedgers", "quicksight:Describe*", "quicksight:List*", + "ram:GetResourceShares", "ram:List*", "rds:Describe*", "rds:DownloadDBLogFilePortion", @@ -125961,7 +129074,7 @@ ] } }, - "v40": { + "v41": { "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", @@ -126151,6 +129264,7 @@ "dynamodb:ListTagsOfResource", "ec2:Describe*", "ec2:GetEbsEncryptionByDefault", + "ec2:GetImageBlockPublicAccessState", "ec2:GetManagedPrefixListAssociations", "ec2:GetManagedPrefixListEntries", "ec2:GetNetworkInsightsAccessScopeAnalysisFindings", @@ -126172,8 +129286,10 @@ "ecr:BatchGetRepositoryScanningConfiguration", "ecr:DescribeImages", "ecr:DescribeImageScanFindings", + "ecr:DescribeRegistry", "ecr:DescribeRepositories", "ecr:GetLifecyclePolicy", + "ecr:GetRegistryPolicy", "ecr:GetRegistryScanningConfiguration", "ecr:GetRepositoryPolicy", "ecr:ListImages", @@ -126640,15 +129756,14 @@ ] } }, - "v41": { + "v42": { "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", "Statement": [ { - "Effect": "Allow", - "Resource": "*", "Sid": "BaseSecurityAuditStatement", + "Effect": "Allow", "Action": [ "a4b:ListSkills", "access-analyzer:GetAnalyzedResource", @@ -126670,6 +129785,7 @@ "acm-pca:ListTags", "acm:Describe*", "acm:List*", + "airflow:GetEnvironment", "airflow:ListEnvironments", "appflow:ListFlows", "appflow:ListTagsForResource", @@ -126696,8 +129812,8 @@ "athena:List*", "auditmanager:GetAccountStatus", "auditmanager:ListAssessmentControlInsightsByControlDomain", - "auditmanager:ListAssessmentFrameworks", "auditmanager:ListAssessmentFrameworkShareRequests", + "auditmanager:ListAssessmentFrameworks", "auditmanager:ListAssessmentReports", "auditmanager:ListAssessments", "auditmanager:ListControlDomainInsights", @@ -126708,11 +129824,18 @@ "auditmanager:ListTagsForResource", "autoscaling-plans:DescribeScalingPlans", "autoscaling:Describe*", + "backup:DescribeGlobalSettings", "backup:DescribeRegionSettings", "backup:GetBackupVaultAccessPolicy", + "backup:GetBackupVaultNotifications", "backup:ListBackupVaults", + "backup:ListTags", "batch:DescribeComputeEnvironments", "batch:DescribeJobDefinitions", + "bedrock:GetCustomModel", + "bedrock:GetModelInvocationLoggingConfiguration", + "bedrock:ListCustomModels", + "bedrock:ListTagsForResource", "braket:SearchJobs", "braket:SearchQuantumTasks", "chime:List*", @@ -126730,18 +129853,21 @@ "cloudsearch:DescribeServiceAccessPolicies", "cloudtrail:DescribeTrails", "cloudtrail:GetEventSelectors", + "cloudtrail:GetInsightSelectors", "cloudtrail:GetTrail", "cloudtrail:GetTrailStatus", "cloudtrail:ListTags", + "cloudtrail:ListTrails", "cloudtrail:LookupEvents", "cloudwatch:Describe*", "cloudwatch:GetDashboard", - "cloudwatch:ListTagsForResource", "cloudwatch:ListDashboards", + "cloudwatch:ListTagsForResource", "codeartifact:GetDomainPermissionsPolicy", "codeartifact:GetRepositoryPermissionsPolicy", "codeartifact:ListRepositories", "codebuild:BatchGetProjects", + "codebuild:GetResourcePolicy", "codebuild:ListProjects", "codecommit:BatchGetRepositories", "codecommit:GetBranch", @@ -126790,7 +129916,18 @@ "config:List*", "config:SelectAggregateResourceConfig", "config:SelectResourceConfig", + "connect:ListApprovedOrigins", + "connect:ListInstanceAttributes", + "connect:ListInstanceStorageConfigs", "connect:ListInstances", + "connect:ListIntegrationAssociations", + "connect:ListLambdaFunctions", + "connect:ListLexBots", + "connect:ListSecurityKeys", + "databrew:DescribeDataset", + "databrew:DescribeProject", + "databrew:ListJobs", + "databrew:ListProjects", "dataexchange:ListDataSets", "datapipeline:DescribeObjects", "datapipeline:DescribePipelines", @@ -126820,10 +129957,13 @@ "docdb-elastic:ListClusters", "ds:DescribeDirectories", "dynamodb:DescribeContinuousBackups", + "dynamodb:DescribeExport", "dynamodb:DescribeGlobalTable", + "dynamodb:DescribeKinesisStreamingDestination", "dynamodb:DescribeTable", "dynamodb:DescribeTimeToLive", "dynamodb:ListBackups", + "dynamodb:ListExports", "dynamodb:ListGlobalTables", "dynamodb:ListStreams", "dynamodb:ListTables", @@ -126841,8 +129981,8 @@ "ec2:GetTransitGatewayRouteTableAssociations", "ec2:GetTransitGatewayRouteTablePropagations", "ec2:SearchTransitGatewayRoutes", - "ecr-public:DescribeImages", "ecr-public:DescribeImageTags", + "ecr-public:DescribeImages", "ecr-public:DescribeRegistries", "ecr-public:DescribeRepositories", "ecr-public:GetRegistryCatalogData", @@ -126850,8 +129990,8 @@ "ecr-public:GetRepositoryPolicy", "ecr-public:ListTagsForResource", "ecr:BatchGetRepositoryScanningConfiguration", - "ecr:DescribeImages", "ecr:DescribeImageScanFindings", + "ecr:DescribeImages", "ecr:DescribeRegistry", "ecr:DescribeRepositories", "ecr:GetLifecyclePolicy", @@ -126868,28 +130008,35 @@ "eks:ListClusters", "eks:ListFargateProfiles", "eks:ListNodeGroups", + "eks:ListTagsForResource", "eks:ListUpdates", "elastic-inference:DescribeAccelerators", "elasticache:Describe*", "elasticache:ListTagsForResource", "elasticbeanstalk:Describe*", "elasticbeanstalk:ListTagsForResource", + "elasticfilesystem:DescribeAccessPoints", "elasticfilesystem:DescribeAccountPreferences", "elasticfilesystem:DescribeBackupPolicy", "elasticfilesystem:DescribeFileSystemPolicy", "elasticfilesystem:DescribeFileSystems", "elasticfilesystem:DescribeLifecycleConfiguration", - "elasticfilesystem:DescribeMountTargets", "elasticfilesystem:DescribeMountTargetSecurityGroups", + "elasticfilesystem:DescribeMountTargets", "elasticfilesystem:DescribeReplicationConfigurations", "elasticfilesystem:DescribeTags", "elasticloadbalancing:Describe*", "elasticmapreduce:Describe*", + "elasticmapreduce:GetAutoTerminationPolicy", "elasticmapreduce:GetBlockPublicAccessConfiguration", + "elasticmapreduce:GetManagedScalingPolicy", "elasticmapreduce:ListClusters", "elasticmapreduce:ListInstances", "elasticmapreduce:ListSecurityConfigurations", "elastictranscoder:ListPipelines", + "emr-serverless:GetApplication", + "emr-serverless:ListApplications", + "emr-serverless:ListJobRuns", "es:Describe*", "es:GetCompatibleVersions", "es:ListDomainNames", @@ -126913,28 +130060,37 @@ "gamelift:ListFleets", "geo:ListMaps", "glacier:DescribeVault", + "glacier:GetDataRetrievalPolicy", "glacier:GetVaultAccessPolicy", "glacier:GetVaultLock", "glacier:ListVaults", "globalaccelerator:Describe*", "globalaccelerator:List*", "glue:GetCrawlers", - "glue:GetDatabases", "glue:GetDataCatalogEncryptionSettings", + "glue:GetDatabases", "glue:GetDevEndpoints", "glue:GetJobs", "glue:GetResourcePolicy", + "glue:GetSecurityConfiguration", "glue:GetSecurityConfigurations", + "glue:GetTags", "grafana:ListWorkspaces", "greengrass:List*", "guardduty:DescribePublishingDestination", "guardduty:Get*", "guardduty:List*", + "health:DescribeAffectedAccountsForOrganization", "health:DescribeAffectedEntities", + "health:DescribeAffectedEntitiesForOrganization", "health:DescribeEntityAggregates", "health:DescribeEventAggregates", - "health:DescribeEvents", + "health:DescribeEventDetails", + "health:DescribeEventDetailsForOrganization", "health:DescribeEventTypes", + "health:DescribeEvents", + "health:DescribeEventsForOrganization", + "health:DescribeHealthServiceStatusForOrganization", "healthlake:ListFHIRDatastores", "honeycode:ListTables", "iam:GenerateCredentialReport", @@ -126943,10 +130099,10 @@ "iam:List*", "iam:SimulateCustomPolicy", "iam:SimulatePrincipalPolicy", - "inspector:Describe*", - "inspector:Get*", - "inspector:List*", - "inspector:Preview*", + "identitystore:ListGroupMemberships", + "identitystore:ListGroupMembershipsForMember", + "identitystore:ListGroups", + "identitystore:ListUsers", "inspector2:BatchGetAccountStatus", "inspector2:BatchGetFreeTrialInfo", "inspector2:DescribeOrganizationConfiguration", @@ -126963,6 +130119,10 @@ "inspector2:ListFindings", "inspector2:ListTagsForResource", "inspector2:ListUsageTotals", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", "iot:Describe*", "iot:GetPolicy", "iot:GetPolicyVersion", @@ -126982,7 +130142,9 @@ "kafkaconnect:Describe*", "kafkaconnect:List*", "kendra:DescribeIndex", + "kendra:ListDataSources", "kendra:ListIndices", + "kendra:ListTagsForResource", "kinesis:DescribeLimits", "kinesis:DescribeStream", "kinesis:DescribeStreamConsumer", @@ -126992,6 +130154,7 @@ "kinesis:ListStreams", "kinesis:ListTagsForStream", "kinesisanalytics:ListApplications", + "kinesisanalytics:ListTagsForResource", "kinesisvideo:DescribeEdgeConfiguration", "kinesisvideo:DescribeMappedResourceConfiguration", "kinesisvideo:DescribeMediaStorageConfiguration", @@ -127015,16 +130178,20 @@ "lex:DescribeResourcePolicy", "lex:ListBots", "license-manager:List*", - "lightsail:GetDisks", + "lightsail:GetBuckets", + "lightsail:GetContainerServices", "lightsail:GetDiskSnapshots", + "lightsail:GetDisks", "lightsail:GetInstances", "lightsail:GetLoadBalancers", "logs:Describe*", + "logs:ListTagsForResource", "logs:ListTagsLogGroup", "lookoutequipment:ListDatasets", "lookoutmetrics:ListAnomalyDetectors", "lookoutvision:ListProjects", "machinelearning:DescribeMLModels", + "macie2:ListFindings", "managedblockchain:ListNetworks", "mechanicalturk:ListHITs", "mediaconnect:Describe*", @@ -127066,6 +130233,9 @@ "personalize:DescribeDatasetGroup", "personalize:ListDatasetGroups", "private-networks:ListNetworks", + "profile:GetDomain", + "profile:ListDomains", + "profile:ListIntegrations", "qldb:DescribeJournalS3Export", "qldb:DescribeLedger", "qldb:ListJournalS3Exports", @@ -127078,6 +130248,9 @@ "rds:Describe*", "rds:DownloadDBLogFilePortion", "rds:ListTagsForResource", + "redshift-serverless:GetNamespace", + "redshift-serverless:ListTagsForResource", + "redshift-serverless:ListWorkgroups", "redshift:Describe*", "rekognition:Describe*", "rekognition:List*", @@ -127107,11 +130280,13 @@ "s3:GetInventoryConfiguration", "s3:GetLifecycleConfiguration", "s3:GetMetricsConfiguration", + "s3:GetMultiRegionAccessPointPolicy", "s3:GetObjectAcl", "s3:GetObjectVersionAcl", "s3:GetReplicationConfiguration", "s3:ListAccessPoints", "s3:ListAllMyBuckets", + "s3:ListMultiRegionAccessPoints", "sagemaker:Describe*", "sagemaker:List*", "schemas:DescribeCodeBinding", @@ -127121,22 +130296,22 @@ "schemas:GetResourcePolicy", "schemas:ListDiscoverers", "schemas:ListRegistries", - "schemas:ListSchemas", "schemas:ListSchemaVersions", + "schemas:ListSchemas", "schemas:ListTagsForResource", "sdb:DomainMetadata", "sdb:ListDomains", "secretsmanager:DescribeSecret", "secretsmanager:GetResourcePolicy", - "secretsmanager:ListSecrets", "secretsmanager:ListSecretVersionIds", + "secretsmanager:ListSecrets", "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", "serverlessrepo:List*", - "servicequotas:GetAssociationForServiceQuotaTemplate", "servicequotas:GetAWSDefaultServiceQuota", + "servicequotas:GetAssociationForServiceQuotaTemplate", "servicequotas:GetRequestedServiceQuotaChange", "servicequotas:GetServiceQuota", "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", @@ -127148,13 +130323,20 @@ "servicequotas:ListServices", "servicequotas:ListTagsForResource", "ses:Describe*", + "ses:GetAccount", "ses:GetAccountSendingEnabled", + "ses:GetConfigurationSet", + "ses:GetConfigurationSetEventDestinations", + "ses:GetDedicatedIps", + "ses:GetEmailIdentity", "ses:GetIdentityDkimAttributes", "ses:GetIdentityPolicies", "ses:GetIdentityVerificationAttributes", "ses:ListConfigurationSets", + "ses:ListDedicatedIpPools", "ses:ListIdentities", "ses:ListIdentityPolicies", + "ses:ListReceiptFilters", "ses:ListReceiptRuleSets", "ses:ListVerifiedEmailAddresses", "shield:Describe*", @@ -127170,18 +130352,19 @@ "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListDeadLetterSourceQueues", - "sqs:ListQueues", "sqs:ListQueueTags", + "sqs:ListQueues", "ssm:Describe*", "ssm:GetAutomationExecution", - "ssm:ListAssociations", + "ssm:GetServiceSetting", "ssm:ListAssociationVersions", + "ssm:ListAssociations", "ssm:ListCommands", "ssm:ListComplianceItems", "ssm:ListComplianceSummaries", "ssm:ListDocumentMetadataHistory", - "ssm:ListDocuments", "ssm:ListDocumentVersions", + "ssm:ListDocuments", "ssm:ListInventoryEntries", "ssm:ListOpsMetadata", "ssm:ListResourceComplianceSummaries", @@ -127211,8 +130394,8 @@ "sts:GetAccessKeyInfo", "support:DescribeTrustedAdvisorCheckRefreshStatuses", "support:DescribeTrustedAdvisorCheckResult", - "support:DescribeTrustedAdvisorChecks", "support:DescribeTrustedAdvisorCheckSummaries", + "support:DescribeTrustedAdvisorChecks", "synthetics:DescribeCanaries", "synthetics:DescribeCanariesLastRun", "synthetics:DescribeRuntimeVersions", @@ -127242,6 +130425,7 @@ "transfer:List*", "translate:List*", "trustedadvisor:Describe*", + "voiceid:DescribeDomain", "waf-regional:GetWebACL", "waf-regional:ListResourcesForWebACL", "waf-regional:ListTagsForResource", @@ -127249,8 +130433,9 @@ "waf:GetWebACL", "waf:ListTagsForResource", "waf:ListWebACLs", + "wafv2:GetLoggingConfiguration", "wafv2:GetWebACL", - "wafv2:GetWebACLforResource", + "wafv2:GetWebACLForResource", "wafv2:ListAvailableManagedRuleGroups", "wafv2:ListIPSets", "wafv2:ListLoggingConfigurations", @@ -127259,6 +130444,7 @@ "wafv2:ListRuleGroups", "wafv2:ListTagsForResource", "wafv2:ListWebACLs", + "wisdom:GetAssistant", "workdocs:DescribeResourcePermissions", "workspaces:Describe*", "xray:GetEncryptionConfig", @@ -127268,11 +130454,12 @@ "xray:GetSamplingTargets", "xray:GetTraceSummaries", "xray:ListTagsForResource" - ] + ], + "Resource": "*" }, { - "Effect": "Allow", "Sid": "APIGatewayAccess", + "Effect": "Allow", "Action": [ "apigateway:GET" ], @@ -127322,7 +130509,7 @@ ] } }, - "v42": { + "v43": { "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", @@ -127342,6 +130529,7 @@ "access-analyzer:ListFindings", "access-analyzer:ListTagsForResource", "account:GetAlternateContact", + "account:GetPrimaryEmail", "account:GetRegionOptStatus", "acm-pca:DescribeCertificateAuthority", "acm-pca:DescribeCertificateAuthorityAuditReport", @@ -127802,6 +130990,17 @@ "profile:GetDomain", "profile:ListDomains", "profile:ListIntegrations", + "qbusiness:ListApplications", + "qbusiness:ListDataSourceSyncJobs", + "qbusiness:ListDataSources", + "qbusiness:ListDocuments", + "qbusiness:ListGroups", + "qbusiness:ListIndices", + "qbusiness:ListPlugins", + "qbusiness:ListRetrievers", + "qbusiness:ListSubscriptions", + "qbusiness:ListTagsForResource", + "qbusiness:ListWebExperiences", "qldb:DescribeJournalS3Export", "qldb:DescribeLedger", "qldb:ListJournalS3Exports", @@ -128075,7 +131274,7 @@ ] } }, - "v43": { + "v44": { "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", @@ -128505,6 +131704,8 @@ "lightsail:GetInstances", "lightsail:GetLoadBalancers", "logs:Describe*", + "logs:GetLogDelivery", + "logs:ListLogDeliveries", "logs:ListTagsForResource", "logs:ListTagsLogGroup", "lookoutequipment:ListDatasets", @@ -128840,7 +132041,7 @@ ] } }, - "v44": { + "v45": { "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", @@ -129277,6 +132478,11 @@ "lookoutequipment:ListDatasets", "lookoutmetrics:ListAnomalyDetectors", "lookoutvision:ListProjects", + "m2:ListEnvironments", + "m2:ListApplications", + "m2:GetEnvironment", + "m2:GetApplication", + "m2:ListTagsForResource", "machinelearning:DescribeMLModels", "macie2:ListFindings", "managedblockchain:ListNetworks", @@ -129607,7 +132813,7 @@ ] } }, - "v45": { + "v46": { "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", @@ -129664,8 +132870,8 @@ "athena:List*", "auditmanager:GetAccountStatus", "auditmanager:ListAssessmentControlInsightsByControlDomain", - "auditmanager:ListAssessmentFrameworkShareRequests", "auditmanager:ListAssessmentFrameworks", + "auditmanager:ListAssessmentFrameworkShareRequests", "auditmanager:ListAssessmentReports", "auditmanager:ListAssessments", "auditmanager:ListControlDomainInsights", @@ -129770,8 +132976,8 @@ "config:SelectResourceConfig", "connect:ListApprovedOrigins", "connect:ListInstanceAttributes", - "connect:ListInstanceStorageConfigs", "connect:ListInstances", + "connect:ListInstanceStorageConfigs", "connect:ListIntegrationAssociations", "connect:ListLambdaFunctions", "connect:ListLexBots", @@ -129833,8 +133039,8 @@ "ec2:GetTransitGatewayRouteTableAssociations", "ec2:GetTransitGatewayRouteTablePropagations", "ec2:SearchTransitGatewayRoutes", - "ecr-public:DescribeImageTags", "ecr-public:DescribeImages", + "ecr-public:DescribeImageTags", "ecr-public:DescribeRegistries", "ecr-public:DescribeRepositories", "ecr-public:GetRegistryCatalogData", @@ -129842,8 +133048,8 @@ "ecr-public:GetRepositoryPolicy", "ecr-public:ListTagsForResource", "ecr:BatchGetRepositoryScanningConfiguration", - "ecr:DescribeImageScanFindings", "ecr:DescribeImages", + "ecr:DescribeImageScanFindings", "ecr:DescribeRegistry", "ecr:DescribeRepositories", "ecr:GetLifecyclePolicy", @@ -129873,8 +133079,8 @@ "elasticfilesystem:DescribeFileSystemPolicy", "elasticfilesystem:DescribeFileSystems", "elasticfilesystem:DescribeLifecycleConfiguration", - "elasticfilesystem:DescribeMountTargetSecurityGroups", "elasticfilesystem:DescribeMountTargets", + "elasticfilesystem:DescribeMountTargetSecurityGroups", "elasticfilesystem:DescribeReplicationConfigurations", "elasticfilesystem:DescribeTags", "elasticloadbalancing:Describe*", @@ -129919,8 +133125,8 @@ "globalaccelerator:Describe*", "globalaccelerator:List*", "glue:GetCrawlers", - "glue:GetDataCatalogEncryptionSettings", "glue:GetDatabases", + "glue:GetDataCatalogEncryptionSettings", "glue:GetDevEndpoints", "glue:GetJobs", "glue:GetResourcePolicy", @@ -129939,9 +133145,9 @@ "health:DescribeEventAggregates", "health:DescribeEventDetails", "health:DescribeEventDetailsForOrganization", - "health:DescribeEventTypes", "health:DescribeEvents", "health:DescribeEventsForOrganization", + "health:DescribeEventTypes", "health:DescribeHealthServiceStatusForOrganization", "healthlake:ListFHIRDatastores", "honeycode:ListTables", @@ -129955,6 +133161,10 @@ "identitystore:ListGroupMembershipsForMember", "identitystore:ListGroups", "identitystore:ListUsers", + "inspector:Describe*", + "inspector:Get*", + "inspector:List*", + "inspector:Preview*", "inspector2:BatchGetAccountStatus", "inspector2:BatchGetFreeTrialInfo", "inspector2:DescribeOrganizationConfiguration", @@ -129971,10 +133181,6 @@ "inspector2:ListFindings", "inspector2:ListTagsForResource", "inspector2:ListUsageTotals", - "inspector:Describe*", - "inspector:Get*", - "inspector:List*", - "inspector:Preview*", "iot:Describe*", "iot:GetPolicy", "iot:GetPolicyVersion", @@ -130032,8 +133238,8 @@ "license-manager:List*", "lightsail:GetBuckets", "lightsail:GetContainerServices", - "lightsail:GetDiskSnapshots", "lightsail:GetDisks", + "lightsail:GetDiskSnapshots", "lightsail:GetInstances", "lightsail:GetLoadBalancers", "logs:Describe*", @@ -130044,10 +133250,10 @@ "lookoutequipment:ListDatasets", "lookoutmetrics:ListAnomalyDetectors", "lookoutvision:ListProjects", - "m2:ListEnvironments", - "m2:ListApplications", - "m2:GetEnvironment", "m2:GetApplication", + "m2:GetEnvironment", + "m2:ListApplications", + "m2:ListEnvironments", "m2:ListTagsForResource", "machinelearning:DescribeMLModels", "macie2:ListFindings", @@ -130096,8 +133302,8 @@ "profile:ListDomains", "profile:ListIntegrations", "qbusiness:ListApplications", - "qbusiness:ListDataSourceSyncJobs", "qbusiness:ListDataSources", + "qbusiness:ListDataSourceSyncJobs", "qbusiness:ListDocuments", "qbusiness:ListGroups", "qbusiness:ListIndices", @@ -130166,22 +133372,27 @@ "schemas:GetResourcePolicy", "schemas:ListDiscoverers", "schemas:ListRegistries", - "schemas:ListSchemaVersions", "schemas:ListSchemas", + "schemas:ListSchemaVersions", "schemas:ListTagsForResource", "sdb:DomainMetadata", "sdb:ListDomains", "secretsmanager:DescribeSecret", "secretsmanager:GetResourcePolicy", - "secretsmanager:ListSecretVersionIds", "secretsmanager:ListSecrets", + "secretsmanager:ListSecretVersionIds", + "securityhub:BatchGetAutomationRules", + "securityhub:BatchGetConfigurationPolicyAssociations", + "securityhub:BatchGetControlEvaluations", + "securityhub:BatchGetSecurityControls", + "securityhub:BatchGetStandardsControlAssociations", "securityhub:Describe*", "securityhub:Get*", "securityhub:List*", "serverlessrepo:GetApplicationPolicy", "serverlessrepo:List*", - "servicequotas:GetAWSDefaultServiceQuota", "servicequotas:GetAssociationForServiceQuotaTemplate", + "servicequotas:GetAWSDefaultServiceQuota", "servicequotas:GetRequestedServiceQuotaChange", "servicequotas:GetServiceQuota", "servicequotas:GetServiceQuotaIncreaseRequestFromTemplate", @@ -130222,19 +133433,19 @@ "sns:ListTopics", "sqs:GetQueueAttributes", "sqs:ListDeadLetterSourceQueues", - "sqs:ListQueueTags", "sqs:ListQueues", + "sqs:ListQueueTags", "ssm:Describe*", "ssm:GetAutomationExecution", "ssm:GetServiceSetting", - "ssm:ListAssociationVersions", "ssm:ListAssociations", + "ssm:ListAssociationVersions", "ssm:ListCommands", "ssm:ListComplianceItems", "ssm:ListComplianceSummaries", "ssm:ListDocumentMetadataHistory", - "ssm:ListDocumentVersions", "ssm:ListDocuments", + "ssm:ListDocumentVersions", "ssm:ListInventoryEntries", "ssm:ListOpsMetadata", "ssm:ListResourceComplianceSummaries", @@ -130264,8 +133475,8 @@ "sts:GetAccessKeyInfo", "support:DescribeTrustedAdvisorCheckRefreshStatuses", "support:DescribeTrustedAdvisorCheckResult", - "support:DescribeTrustedAdvisorCheckSummaries", "support:DescribeTrustedAdvisorChecks", + "support:DescribeTrustedAdvisorCheckSummaries", "synthetics:DescribeCanaries", "synthetics:DescribeCanariesLastRun", "synthetics:DescribeRuntimeVersions", @@ -130379,7 +133590,7 @@ ] } }, - "v46": { + "v47": { "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", @@ -130493,6 +133704,7 @@ "codebuild:BatchGetProjects", "codebuild:GetResourcePolicy", "codebuild:ListProjects", + "codebuild:ListSourceCredentials", "codecommit:BatchGetRepositories", "codecommit:GetBranch", "codecommit:GetObjectIdentifier", @@ -131156,7 +134368,7 @@ ] } }, - "v47": { + "v48": { "createdDate": "2015-02-06T18:41:01.000Z", "document": { "Version": "2012-10-17", @@ -131240,6 +134452,47 @@ "braket:SearchJobs", "braket:SearchQuantumTasks", "chime:List*", + "cleanrooms:BatchGetCollaborationAnalysisTemplate", + "cleanrooms:BatchGetSchema", + "cleanrooms:BatchGetSchemaAnalysisRule", + "cleanrooms:GetAnalysisTemplate", + "cleanrooms:GetCollaboration", + "cleanrooms:GetCollaborationAnalysisTemplate", + "cleanrooms:GetCollaborationConfiguredAudienceModelAssociation", + "cleanrooms:GetCollaborationIdNamespaceAssociation", + "cleanrooms:GetCollaborationPrivacyBudgetTemplate", + "cleanrooms:GetConfiguredAudienceModelAssociation", + "cleanrooms:GetConfiguredTable", + "cleanrooms:GetConfiguredTableAnalysisRule", + "cleanrooms:GetConfiguredTableAssociation", + "cleanrooms:GetConfiguredTableAssociationAnalysisRule", + "cleanrooms:GetIdMappingTable", + "cleanrooms:GetIdNamespaceAssociation", + "cleanrooms:GetMembership", + "cleanrooms:GetPrivacyBudgetTemplate", + "cleanrooms:GetProtectedQuery", + "cleanrooms:GetSchema", + "cleanrooms:GetSchemaAnalysisRule", + "cleanrooms:ListAnalysisTemplates", + "cleanrooms:ListCollaborationAnalysisTemplates", + "cleanrooms:ListCollaborationConfiguredAudienceModelAssociations", + "cleanrooms:ListCollaborationIdNamespaceAssociations", + "cleanrooms:ListCollaborationPrivacyBudgetTemplates", + "cleanrooms:ListCollaborationPrivacyBudgets", + "cleanrooms:ListCollaborations", + "cleanrooms:ListConfiguredAudienceModelAssociations", + "cleanrooms:ListConfiguredTableAssociations", + "cleanrooms:ListConfiguredTables", + "cleanrooms:ListIdMappingTables", + "cleanrooms:ListIdNamespaceAssociations", + "cleanrooms:ListMembers", + "cleanrooms:ListMemberships", + "cleanrooms:ListPrivacyBudgetTemplates", + "cleanrooms:ListPrivacyBudgets", + "cleanrooms:ListProtectedQueries", + "cleanrooms:ListSchemas", + "cleanrooms:ListTagsForResource", + "cleanrooms:PreviewPrivacyImpact", "cloud9:Describe*", "cloud9:ListEnvironments", "clouddirectory:ListDirectories", @@ -131439,6 +134692,7 @@ "emr-serverless:GetApplication", "emr-serverless:ListApplications", "emr-serverless:ListJobRuns", + "entityresolution:GetIdNamespace", "es:Describe*", "es:GetCompatibleVersions", "es:ListDomainNames", @@ -131936,7 +135190,7 @@ } }, "createdDate": "2015-02-06T18:41:01.000Z", - "lastUpdatedDate": "2024-11-22T19:51:06.000Z" + "lastUpdatedDate": "2024-12-31T03:22:06.000Z" }, "AmazonSESFullAccess": { "arn": "arn:aws:iam::aws:policy/AmazonSESFullAccess",