aws-iam-managed-policies 0.0.595 → 0.0.596

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/managedPolicies.json +1304 -116
  2. package/package.json +1 -1
package/dist/managedPolicies.json CHANGED
@@ -752065,8 +752065,8 @@
752065
752065
  },
752066
752066
  "AWSNetworkFirewallServiceRolePolicy": {
752067
752067
  "arn": "arn:aws:iam::aws:policy/aws-service-role/AWSNetworkFirewallServiceRolePolicy",
752068
- "latestVersionId": "v3",
752069
- "versionsCount": 3,
752068
+ "latestVersionId": "v4",
752069
+ "versionsCount": 4,
752070
752070
  "versions": {
752071
752071
  "v3": {
752072
752072
  "createdDate": "2023-03-30T17:19:09.000Z",
@@ -752235,10 +752235,89 @@
752235
752235
  }
752236
752236
  ]
752237
752237
  }
752238
+ },
752239
+ "v4": {
752240
+ "createdDate": "2020-11-17T17:17:26.000Z",
752241
+ "document": {
752242
+ "Version": "2012-10-17",
752243
+ "Statement": [
752244
+ {
752245
+ "Action": [
752246
+ "ec2:DescribeSubnets",
752247
+ "ec2:DescribeVpcs",
752248
+ "ec2:CreateVpcEndpoint",
752249
+ "ec2:DescribeVpcEndpoints",
752250
+ "ec2:DescribeInstances",
752251
+ "ec2:DescribeNetworkInterfaces"
752252
+ ],
752253
+ "Effect": "Allow",
752254
+ "Resource": "*"
752255
+ },
752256
+ {
752257
+ "Effect": "Allow",
752258
+ "Action": "acm:DescribeCertificate",
752259
+ "Resource": "*"
752260
+ },
752261
+ {
752262
+ "Effect": "Allow",
752263
+ "Action": "resource-groups:ListGroupResources",
752264
+ "Resource": "*"
752265
+ },
752266
+ {
752267
+ "Effect": "Allow",
752268
+ "Action": "tag:GetResources",
752269
+ "Resource": "*",
752270
+ "Condition": {
752271
+ "StringEquals": {
752272
+ "aws:CalledViaLast": "resource-groups.amazonaws.com"
752273
+ }
752274
+ }
752275
+ },
752276
+ {
752277
+ "Effect": "Allow",
752278
+ "Action": [
752279
+ "ec2:CreateTags"
752280
+ ],
752281
+ "Resource": "arn:aws:ec2:*:*:vpc-endpoint/*",
752282
+ "Condition": {
752283
+ "StringEquals": {
752284
+ "ec2:CreateAction": "CreateVpcEndpoint",
752285
+ "aws:RequestTag/AWSNetworkFirewallManaged": "true"
752286
+ }
752287
+ }
752288
+ },
752289
+ {
752290
+ "Effect": "Allow",
752291
+ "Action": [
752292
+ "ec2:DeleteVpcEndpoints"
752293
+ ],
752294
+ "Resource": "*",
752295
+ "Condition": {
752296
+ "StringEquals": {
752297
+ "aws:ResourceTag/AWSNetworkFirewallManaged": "true"
752298
+ }
752299
+ }
752300
+ },
752301
+ {
752302
+ "Effect": "Allow",
752303
+ "Action": [
752304
+ "ecs:ListContainerInstances",
752305
+ "ecs:ListTasks",
752306
+ "ecs:DescribeTasks",
752307
+ "ecs:DescribeContainerInstances"
752308
+ ],
752309
+ "Resource": [
752310
+ "arn:aws:ecs:*:*:cluster/*",
752311
+ "arn:aws:ecs:*:*:container-instance/*/*",
752312
+ "arn:aws:ecs:*:*:task/*/*"
752313
+ ]
752314
+ }
752315
+ ]
752316
+ }
752238
752317
  }
752239
752318
  },
752240
752319
  "createdDate": "2020-11-17T17:17:26.000Z",
752241
- "lastUpdatedDate": "2023-03-30T17:19:09.000Z"
752320
+ "lastUpdatedDate": "2026-06-01T21:57:07.000Z"
752242
752321
  },
752243
752322
  "AWSLambda_ReadOnlyAccess": {
752244
752323
  "arn": "arn:aws:iam::aws:policy/AWSLambda_ReadOnlyAccess",
@@ -1227759,8 +1227838,8 @@
1227759
1227838
  },
1227760
1227839
  "SageMakerStudioEMRInstanceRolePolicy": {
1227761
1227840
  "arn": "arn:aws:iam::aws:policy/service-role/SageMakerStudioEMRInstanceRolePolicy",
1227762
- "latestVersionId": "v3",
1227763
- "versionsCount": 3,
1227841
+ "latestVersionId": "v4",
1227842
+ "versionsCount": 4,
1227764
1227843
  "versions": {
1227765
1227844
  "v1": {
1227766
1227845
  "createdDate": "2025-02-27T00:22:06.000Z",
@@ -1228172,151 +1228251,293 @@
1228172
1228251
  }
1228173
1228252
  ]
1228174
1228253
  }
1228175
- }
1228176
- },
1228177
- "createdDate": "2025-02-27T00:22:06.000Z",
1228178
- "lastUpdatedDate": "2026-02-12T17:57:24.000Z"
1228179
- },
1228180
- "AWSBackupSearchOperatorAccess": {
1228181
- "arn": "arn:aws:iam::aws:policy/AWSBackupSearchOperatorAccess",
1228182
- "latestVersionId": "v6",
1228183
- "versionsCount": 6,
1228184
- "versions": {
1228185
- "v1": {
1228186
- "createdDate": "2025-02-27T21:52:06.000Z",
1228254
+ },
1228255
+ "v4": {
1228256
+ "createdDate": "2025-02-27T00:22:06.000Z",
1228187
1228257
  "document": {
1228188
1228258
  "Version": "2012-10-17",
1228189
1228259
  "Statement": [
1228190
1228260
  {
1228191
- "Sid": "StartSearchAndListPermissions",
1228192
- "Effect": "Allow",
1228193
- "Action": [
1228194
- "backup-search:StartSearchJob",
1228195
- "backup-search:ListSearchJobs",
1228196
- "backup-search:ListSearchResultExportJobs",
1228197
- "backup:ListIndexedRecoveryPointsForSearch"
1228198
- ],
1228199
- "Resource": "*"
1228200
- },
1228201
- {
1228202
- "Sid": "BackupSearchRecoveryPointPermissions",
1228261
+ "Sid": "AccessCertificateLocationS3Permission",
1228203
1228262
  "Effect": "Allow",
1228204
- "Action": [
1228205
- "backup:SearchRecoveryPoint"
1228206
- ],
1228207
- "Resource": [
1228208
- "arn:aws:ec2:*::snapshot/*",
1228209
- "arn:aws:backup:*:*:recovery-point:*"
1228210
- ]
1228263
+ "Action": "s3:GetObject",
1228264
+ "Resource": "arn:aws:s3:::${aws:PrincipalTag/DomainBucketName}/${aws:PrincipalTag/AmazonDataZoneDomain}/certificate_location/*",
1228265
+ "Condition": {
1228266
+ "StringNotEquals": {
1228267
+ "aws:PrincipalTag/DomainBucketName": "",
1228268
+ "aws:PrincipalTag/AmazonDataZoneDomain": ""
1228269
+ },
1228270
+ "Null": {
1228271
+ "aws:PrincipalTag/AmazonDataZoneProject": "false"
1228272
+ },
1228273
+ "StringEquals": {
1228274
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1228275
+ }
1228276
+ }
1228211
1228277
  },
1228212
1228278
  {
1228213
- "Sid": "SearchAndExportPermissions",
1228279
+ "Sid": "AccessPatchingRPMsS3Permission",
1228214
1228280
  "Effect": "Allow",
1228215
- "Action": [
1228216
- "backup-search:StartSearchResultExportJob",
1228217
- "backup-search:StopSearchJob",
1228218
- "backup-search:GetSearchJob",
1228219
- "backup-search:GetSearchResultExportJob",
1228220
- "backup-search:ListSearchJobResults",
1228221
- "backup-search:ListSearchJobBackups"
1228222
- ],
1228281
+ "Action": "s3:GetObject",
1228223
1228282
  "Resource": [
1228224
- "arn:aws:backup-search:*:*:search-job/*",
1228225
- "arn:aws:backup-search:*:*:search-export-job/*"
1228226
- ]
1228227
- },
1228228
- {
1228229
- "Sid": "KMSDataKeyForSearchAndExportPermissions",
1228230
- "Effect": "Allow",
1228231
- "Action": [
1228232
- "kms:Decrypt",
1228233
- "kms:GenerateDataKey"
1228283
+ "arn:aws:s3:::default-env-blueprint-*/*",
1228284
+ "arn:aws:s3:::awssmuscompute-blueprint-bucket-*/*",
1228285
+ "arn:aws:s3:*:*:accesspoint/env-blueprint-accesspoint*",
1228286
+ "arn:aws:s3:*:*:accesspoint/env-partner-blueprint-accesspoint*"
1228234
1228287
  ],
1228235
- "Resource": "arn:aws:kms:*:*:key/*",
1228236
1228288
  "Condition": {
1228237
- "ForAllValues:StringEquals": {
1228238
- "kms:EncryptionContextKeys": [
1228239
- "aws:backup-search:search-job"
1228289
+ "ArnLike": {
1228290
+ "s3:DataAccessPointArn": [
1228291
+ "arn:aws:s3:*:*:accesspoint/env-blueprint-accesspoint",
1228292
+ "arn:aws:s3:*:*:accesspoint/env-partner-blueprint-accesspoint"
1228240
1228293
  ]
1228241
1228294
  },
1228242
- "StringLike": {
1228243
- "kms:ViaService": [
1228244
- "backup.*.amazonaws.com"
1228245
- ]
1228295
+ "StringNotEquals": {
1228296
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1228246
1228297
  }
1228247
1228298
  }
1228248
- }
1228249
- ]
1228250
- }
1228251
- },
1228252
- "v2": {
1228253
- "createdDate": "2025-02-27T21:52:06.000Z",
1228254
- "document": {
1228255
- "Version": "2012-10-17",
1228256
- "Statement": [
1228299
+ },
1228257
1228300
  {
1228258
- "Sid": "StartSearchAndListPermissions",
1228301
+ "Sid": "AccessBootstrapActionScriptS3Permission",
1228259
1228302
  "Effect": "Allow",
1228260
- "Action": [
1228261
- "backup-search:StartSearchJob",
1228262
- "backup-search:ListSearchJobs",
1228263
- "backup-search:ListSearchResultExportJobs",
1228264
- "backup:ListIndexedRecoveryPointsForSearch"
1228265
- ],
1228266
- "Resource": "*"
1228303
+ "Action": "s3:GetObject",
1228304
+ "Resource": "arn:aws:s3:::${aws:PrincipalTag/DomainBucketName}/${aws:PrincipalTag/AmazonDataZoneDomain}/${aws:PrincipalTag/AmazonDataZoneProject}/${aws:PrincipalTag/AmazonDataZoneScopeName}/sys/emr/bootstrap-script/*",
1228305
+ "Condition": {
1228306
+ "StringNotEquals": {
1228307
+ "aws:PrincipalTag/DomainBucketName": "",
1228308
+ "aws:PrincipalTag/AmazonDataZoneDomain": "",
1228309
+ "aws:PrincipalTag/AmazonDataZoneProject": "",
1228310
+ "aws:PrincipalTag/AmazonDataZoneScopeName": ""
1228311
+ },
1228312
+ "Null": {
1228313
+ "aws:PrincipalTag/AmazonDataZoneProject": "false"
1228314
+ },
1228315
+ "StringEquals": {
1228316
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1228317
+ }
1228318
+ }
1228267
1228319
  },
1228268
1228320
  {
1228269
- "Sid": "BackupSearchRecoveryPointPermissions",
1228321
+ "Sid": "EMRClusterLogUploadS3Permission",
1228270
1228322
  "Effect": "Allow",
1228271
- "Action": [
1228272
- "backup:SearchRecoveryPoint"
1228273
- ],
1228274
- "Resource": [
1228275
- "arn:aws:ec2:*::snapshot/*",
1228276
- "arn:aws:backup:*:*:recovery-point:*"
1228277
- ]
1228323
+ "Action": "s3:PutObject",
1228324
+ "Resource": "arn:aws:s3:::${aws:PrincipalTag/DomainBucketName}/${aws:PrincipalTag/AmazonDataZoneDomain}/${aws:PrincipalTag/AmazonDataZoneProject}/${aws:PrincipalTag/AmazonDataZoneScopeName}/sys/emr/*",
1228325
+ "Condition": {
1228326
+ "StringNotEquals": {
1228327
+ "aws:PrincipalTag/DomainBucketName": "",
1228328
+ "aws:PrincipalTag/AmazonDataZoneDomain": "",
1228329
+ "aws:PrincipalTag/AmazonDataZoneProject": "",
1228330
+ "aws:PrincipalTag/AmazonDataZoneScopeName": ""
1228331
+ },
1228332
+ "Null": {
1228333
+ "aws:PrincipalTag/AmazonDataZoneProject": "false"
1228334
+ },
1228335
+ "StringEquals": {
1228336
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1228337
+ }
1228338
+ }
1228278
1228339
  },
1228279
1228340
  {
1228280
- "Sid": "SearchAndExportPermissions",
1228341
+ "Sid": "EMRRuntimeRoleAssumePermissions",
1228281
1228342
  "Effect": "Allow",
1228282
1228343
  "Action": [
1228283
- "backup-search:StartSearchResultExportJob",
1228284
- "backup-search:StopSearchJob",
1228285
- "backup-search:GetSearchJob",
1228286
- "backup-search:GetSearchResultExportJob",
1228287
- "backup-search:ListSearchJobResults",
1228288
- "backup-search:ListSearchJobBackups"
1228344
+ "sts:AssumeRole",
1228345
+ "sts:TagSession"
1228289
1228346
  ],
1228290
- "Resource": [
1228291
- "arn:aws:backup-search:*:*:search-job/*",
1228292
- "arn:aws:backup-search:*:*:search-export-job/*"
1228293
- ]
1228347
+ "Resource": "*",
1228348
+ "Condition": {
1228349
+ "ForAllValues:StringEquals": {
1228350
+ "aws:TagKeys": [
1228351
+ "LakeFormationAuthorizedCaller"
1228352
+ ]
1228353
+ },
1228354
+ "StringEquals": {
1228355
+ "iam:ResourceTag/AmazonDataZoneProject": "${aws:PrincipalTag/AmazonDataZoneProject}"
1228356
+ }
1228357
+ }
1228294
1228358
  },
1228295
1228359
  {
1228296
- "Sid": "KMSDataKeyForSearchAndExportPermissions",
1228360
+ "Sid": "EMRKMSPermissions",
1228297
1228361
  "Effect": "Allow",
1228298
1228362
  "Action": [
1228363
+ "kms:CreateGrant",
1228299
1228364
  "kms:Decrypt",
1228300
- "kms:GenerateDataKey"
1228365
+ "kms:Encrypt",
1228366
+ "kms:GenerateDataKeyWithoutPlaintext"
1228301
1228367
  ],
1228302
- "Resource": "arn:aws:kms:*:*:key/*",
1228368
+ "Resource": "arn:aws:kms:*:*:key/${aws:PrincipalTag/KmsKeyId}",
1228303
1228369
  "Condition": {
1228304
- "ForAllValues:StringEquals": {
1228305
- "kms:EncryptionContextKeys": [
1228306
- "aws:backup-search:search-job"
1228307
- ]
1228308
- },
1228309
1228370
  "StringLike": {
1228310
1228371
  "kms:ViaService": [
1228311
- "backup.*.amazonaws.com"
1228372
+ "ec2.*.amazonaws.com"
1228312
1228373
  ]
1228374
+ },
1228375
+ "StringEquals": {
1228376
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1228377
+ },
1228378
+ "Null": {
1228379
+ "kms:EncryptionContextKeys": "false"
1228380
+ }
1228381
+ }
1228382
+ },
1228383
+ {
1228384
+ "Sid": "AllowGenerateDataKeyForEbsEncryption",
1228385
+ "Effect": "Allow",
1228386
+ "Action": "kms:GenerateDataKey",
1228387
+ "Resource": "arn:aws:kms:*:*:key/${aws:PrincipalTag/KmsKeyId}",
1228388
+ "Condition": {
1228389
+ "StringEquals": {
1228390
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1228313
1228391
  }
1228314
1228392
  }
1228315
1228393
  }
1228316
1228394
  ]
1228317
1228395
  }
1228318
- },
1228319
- "v4": {
1228396
+ }
1228397
+ },
1228398
+ "createdDate": "2025-02-27T00:22:06.000Z",
1228399
+ "lastUpdatedDate": "2026-06-01T23:27:10.000Z"
1228400
+ },
1228401
+ "AWSBackupSearchOperatorAccess": {
1228402
+ "arn": "arn:aws:iam::aws:policy/AWSBackupSearchOperatorAccess",
1228403
+ "latestVersionId": "v6",
1228404
+ "versionsCount": 6,
1228405
+ "versions": {
1228406
+ "v1": {
1228407
+ "createdDate": "2025-02-27T21:52:06.000Z",
1228408
+ "document": {
1228409
+ "Version": "2012-10-17",
1228410
+ "Statement": [
1228411
+ {
1228412
+ "Sid": "StartSearchAndListPermissions",
1228413
+ "Effect": "Allow",
1228414
+ "Action": [
1228415
+ "backup-search:StartSearchJob",
1228416
+ "backup-search:ListSearchJobs",
1228417
+ "backup-search:ListSearchResultExportJobs",
1228418
+ "backup:ListIndexedRecoveryPointsForSearch"
1228419
+ ],
1228420
+ "Resource": "*"
1228421
+ },
1228422
+ {
1228423
+ "Sid": "BackupSearchRecoveryPointPermissions",
1228424
+ "Effect": "Allow",
1228425
+ "Action": [
1228426
+ "backup:SearchRecoveryPoint"
1228427
+ ],
1228428
+ "Resource": [
1228429
+ "arn:aws:ec2:*::snapshot/*",
1228430
+ "arn:aws:backup:*:*:recovery-point:*"
1228431
+ ]
1228432
+ },
1228433
+ {
1228434
+ "Sid": "SearchAndExportPermissions",
1228435
+ "Effect": "Allow",
1228436
+ "Action": [
1228437
+ "backup-search:StartSearchResultExportJob",
1228438
+ "backup-search:StopSearchJob",
1228439
+ "backup-search:GetSearchJob",
1228440
+ "backup-search:GetSearchResultExportJob",
1228441
+ "backup-search:ListSearchJobResults",
1228442
+ "backup-search:ListSearchJobBackups"
1228443
+ ],
1228444
+ "Resource": [
1228445
+ "arn:aws:backup-search:*:*:search-job/*",
1228446
+ "arn:aws:backup-search:*:*:search-export-job/*"
1228447
+ ]
1228448
+ },
1228449
+ {
1228450
+ "Sid": "KMSDataKeyForSearchAndExportPermissions",
1228451
+ "Effect": "Allow",
1228452
+ "Action": [
1228453
+ "kms:Decrypt",
1228454
+ "kms:GenerateDataKey"
1228455
+ ],
1228456
+ "Resource": "arn:aws:kms:*:*:key/*",
1228457
+ "Condition": {
1228458
+ "ForAllValues:StringEquals": {
1228459
+ "kms:EncryptionContextKeys": [
1228460
+ "aws:backup-search:search-job"
1228461
+ ]
1228462
+ },
1228463
+ "StringLike": {
1228464
+ "kms:ViaService": [
1228465
+ "backup.*.amazonaws.com"
1228466
+ ]
1228467
+ }
1228468
+ }
1228469
+ }
1228470
+ ]
1228471
+ }
1228472
+ },
1228473
+ "v2": {
1228474
+ "createdDate": "2025-02-27T21:52:06.000Z",
1228475
+ "document": {
1228476
+ "Version": "2012-10-17",
1228477
+ "Statement": [
1228478
+ {
1228479
+ "Sid": "StartSearchAndListPermissions",
1228480
+ "Effect": "Allow",
1228481
+ "Action": [
1228482
+ "backup-search:StartSearchJob",
1228483
+ "backup-search:ListSearchJobs",
1228484
+ "backup-search:ListSearchResultExportJobs",
1228485
+ "backup:ListIndexedRecoveryPointsForSearch"
1228486
+ ],
1228487
+ "Resource": "*"
1228488
+ },
1228489
+ {
1228490
+ "Sid": "BackupSearchRecoveryPointPermissions",
1228491
+ "Effect": "Allow",
1228492
+ "Action": [
1228493
+ "backup:SearchRecoveryPoint"
1228494
+ ],
1228495
+ "Resource": [
1228496
+ "arn:aws:ec2:*::snapshot/*",
1228497
+ "arn:aws:backup:*:*:recovery-point:*"
1228498
+ ]
1228499
+ },
1228500
+ {
1228501
+ "Sid": "SearchAndExportPermissions",
1228502
+ "Effect": "Allow",
1228503
+ "Action": [
1228504
+ "backup-search:StartSearchResultExportJob",
1228505
+ "backup-search:StopSearchJob",
1228506
+ "backup-search:GetSearchJob",
1228507
+ "backup-search:GetSearchResultExportJob",
1228508
+ "backup-search:ListSearchJobResults",
1228509
+ "backup-search:ListSearchJobBackups"
1228510
+ ],
1228511
+ "Resource": [
1228512
+ "arn:aws:backup-search:*:*:search-job/*",
1228513
+ "arn:aws:backup-search:*:*:search-export-job/*"
1228514
+ ]
1228515
+ },
1228516
+ {
1228517
+ "Sid": "KMSDataKeyForSearchAndExportPermissions",
1228518
+ "Effect": "Allow",
1228519
+ "Action": [
1228520
+ "kms:Decrypt",
1228521
+ "kms:GenerateDataKey"
1228522
+ ],
1228523
+ "Resource": "arn:aws:kms:*:*:key/*",
1228524
+ "Condition": {
1228525
+ "ForAllValues:StringEquals": {
1228526
+ "kms:EncryptionContextKeys": [
1228527
+ "aws:backup-search:search-job"
1228528
+ ]
1228529
+ },
1228530
+ "StringLike": {
1228531
+ "kms:ViaService": [
1228532
+ "backup.*.amazonaws.com"
1228533
+ ]
1228534
+ }
1228535
+ }
1228536
+ }
1228537
+ ]
1228538
+ }
1228539
+ },
1228540
+ "v4": {
1228320
1228541
  "createdDate": "2025-02-27T21:52:06.000Z",
1228321
1228542
  "document": {
1228322
1228543
  "Version": "2012-10-17",
@@ -1306811,8 +1307032,8 @@
1306811
1307032
  },
1306812
1307033
  "AIDevOpsAgentAccessPolicy": {
1306813
1307034
  "arn": "arn:aws:iam::aws:policy/AIDevOpsAgentAccessPolicy",
1306814
- "latestVersionId": "v4",
1306815
- "versionsCount": 4,
1307035
+ "latestVersionId": "v5",
1307036
+ "versionsCount": 5,
1306816
1307037
  "versions": {
1306817
1307038
  "v1": {
1306818
1307039
  "createdDate": "2026-03-26T03:42:09.000Z",
@@ -1310256,15 +1310477,877 @@
1310256
1310477
  }
1310257
1310478
  ]
1310258
1310479
  }
1310480
+ },
1310481
+ "v5": {
1310482
+ "createdDate": "2026-03-26T03:42:09.000Z",
1310483
+ "document": {
1310484
+ "Version": "2012-10-17",
1310485
+ "Statement": [
1310486
+ {
1310487
+ "Sid": "AIOPSServiceAccess",
1310488
+ "Effect": "Allow",
1310489
+ "Action": [
1310490
+ "access-analyzer:GetAnalyzer",
1310491
+ "access-analyzer:List*",
1310492
+ "acm-pca:Describe*",
1310493
+ "acm-pca:GetCertificate",
1310494
+ "acm-pca:GetCertificateAuthorityCertificate",
1310495
+ "acm-pca:GetCertificateAuthorityCsr",
1310496
+ "acm-pca:List*",
1310497
+ "acm:DescribeCertificate",
1310498
+ "acm:GetAccountConfiguration",
1310499
+ "aidevops:GetKnowledgeItem",
1310500
+ "aidevops:ListKnowledgeItems",
1310501
+ "airflow:List*",
1310502
+ "amplify:GetApp",
1310503
+ "amplify:GetBranch",
1310504
+ "amplify:GetDomainAssociation",
1310505
+ "amplify:List*",
1310506
+ "aoss:BatchGetCollection",
1310507
+ "aoss:BatchGetLifecyclePolicy",
1310508
+ "aoss:BatchGetVpcEndpoint",
1310509
+ "aoss:GetAccessPolicy",
1310510
+ "aoss:GetSecurityConfig",
1310511
+ "aoss:GetSecurityPolicy",
1310512
+ "aoss:List*",
1310513
+ "appconfig:GetApplication",
1310514
+ "appconfig:GetConfigurationProfile",
1310515
+ "appconfig:GetEnvironment",
1310516
+ "appconfig:GetHostedConfigurationVersion",
1310517
+ "appconfig:List*",
1310518
+ "appflow:Describe*",
1310519
+ "appflow:List*",
1310520
+ "application-autoscaling:Describe*",
1310521
+ "application-signals:BatchGetServiceLevelObjectiveBudgetReport",
1310522
+ "application-signals:GetService",
1310523
+ "application-signals:GetServiceLevelObjective",
1310524
+ "application-signals:List*",
1310525
+ "applicationinsights:Describe*",
1310526
+ "applicationinsights:List*",
1310527
+ "apprunner:Describe*",
1310528
+ "apprunner:List*",
1310529
+ "appstream:Describe*",
1310530
+ "appstream:List*",
1310531
+ "appsync:GetApiAssociation",
1310532
+ "appsync:GetDataSource",
1310533
+ "appsync:GetDomainName",
1310534
+ "appsync:GetFunction",
1310535
+ "appsync:GetGraphqlApi",
1310536
+ "appsync:GetGraphqlApiEnvironmentVariables",
1310537
+ "appsync:GetIntrospectionSchema",
1310538
+ "appsync:GetResolver",
1310539
+ "appsync:GetSourceApiAssociation",
1310540
+ "appsync:List*",
1310541
+ "aps:Describe*",
1310542
+ "aps:List*",
1310543
+ "arc-zonal-shift:GetManagedResource",
1310544
+ "arc-zonal-shift:List*",
1310545
+ "athena:GetCapacityAssignmentConfiguration",
1310546
+ "athena:GetCapacityReservation",
1310547
+ "athena:GetDataCatalog",
1310548
+ "athena:GetNamedQuery",
1310549
+ "athena:GetPreparedStatement",
1310550
+ "athena:GetWorkGroup",
1310551
+ "athena:List*",
1310552
+ "auditmanager:GetAssessment",
1310553
+ "auditmanager:List*",
1310554
+ "autoscaling:Describe*",
1310555
+ "backup-gateway:GetHypervisor",
1310556
+ "backup-gateway:List*",
1310557
+ "backup:Describe*",
1310558
+ "backup:GetBackupPlan",
1310559
+ "backup:GetBackupSelection",
1310560
+ "backup:GetBackupVaultAccessPolicy",
1310561
+ "backup:GetBackupVaultNotifications",
1310562
+ "backup:GetRestoreTestingPlan",
1310563
+ "backup:GetRestoreTestingSelection",
1310564
+ "backup:List*",
1310565
+ "batch:DescribeComputeEnvironments",
1310566
+ "batch:DescribeJobQueues",
1310567
+ "batch:DescribeSchedulingPolicies",
1310568
+ "batch:List*",
1310569
+ "bedrock:GetAgent",
1310570
+ "bedrock:GetAgentActionGroup",
1310571
+ "bedrock:GetAgentAlias",
1310572
+ "bedrock:GetAgentKnowledgeBase",
1310573
+ "bedrock:GetDataSource",
1310574
+ "bedrock:GetGuardrail",
1310575
+ "bedrock:GetKnowledgeBase",
1310576
+ "bedrock:List*",
1310577
+ "budgets:Describe*",
1310578
+ "budgets:List*",
1310579
+ "ce:Describe*",
1310580
+ "ce:Get*",
1310581
+ "ce:List*",
1310582
+ "chatbot:Describe*",
1310583
+ "chatbot:GetMicrosoftTeamsChannelConfiguration",
1310584
+ "chatbot:List*",
1310585
+ "cleanrooms-ml:GetTrainingDataset",
1310586
+ "cleanrooms-ml:List*",
1310587
+ "cleanrooms:GetAnalysisTemplate",
1310588
+ "cleanrooms:GetCollaboration",
1310589
+ "cleanrooms:GetConfiguredTable",
1310590
+ "cleanrooms:GetConfiguredTableAnalysisRule",
1310591
+ "cleanrooms:GetConfiguredTableAssociation",
1310592
+ "cleanrooms:GetMembership",
1310593
+ "cleanrooms:List*",
1310594
+ "cloudformation:Describe*",
1310595
+ "cloudformation:GetResource",
1310596
+ "cloudformation:GetStackPolicy",
1310597
+ "cloudformation:GetTemplate",
1310598
+ "cloudformation:List*",
1310599
+ "cloudfront:Describe*",
1310600
+ "cloudfront:GetCachePolicy",
1310601
+ "cloudfront:GetCloudFrontOriginAccessIdentity",
1310602
+ "cloudfront:GetContinuousDeploymentPolicy",
1310603
+ "cloudfront:GetDistribution",
1310604
+ "cloudfront:GetDistributionConfig",
1310605
+ "cloudfront:GetFunction",
1310606
+ "cloudfront:GetKeyGroup",
1310607
+ "cloudfront:GetMonitoringSubscription",
1310608
+ "cloudfront:GetOriginAccessControl",
1310609
+ "cloudfront:GetOriginRequestPolicy",
1310610
+ "cloudfront:GetPublicKey",
1310611
+ "cloudfront:GetRealtimeLogConfig",
1310612
+ "cloudfront:GetResponseHeadersPolicy",
1310613
+ "cloudfront:List*",
1310614
+ "cloudtrail:Describe*",
1310615
+ "cloudtrail:GetChannel",
1310616
+ "cloudtrail:GetEventConfiguration",
1310617
+ "cloudtrail:GetEventDataStore",
1310618
+ "cloudtrail:GetEventSelectors",
1310619
+ "cloudtrail:GetInsightSelectors",
1310620
+ "cloudtrail:GetQueryResults",
1310621
+ "cloudtrail:GetResourcePolicy",
1310622
+ "cloudtrail:GetTrail",
1310623
+ "cloudtrail:GetTrailStatus",
1310624
+ "cloudtrail:List*",
1310625
+ "cloudtrail:LookupEvents",
1310626
+ "cloudtrail:StartQuery",
1310627
+ "cloudwatch:Describe*",
1310628
+ "cloudwatch:GenerateQuery",
1310629
+ "cloudwatch:GetDashboard",
1310630
+ "cloudwatch:GetInsightRuleReport",
1310631
+ "cloudwatch:GetMetricData",
1310632
+ "cloudwatch:GetMetricStatistics",
1310633
+ "cloudwatch:GetMetricStream",
1310634
+ "cloudwatch:GetService",
1310635
+ "cloudwatch:GetServiceLevelObjective",
1310636
+ "cloudwatch:List*",
1310637
+ "codeartifact:Describe*",
1310638
+ "codeartifact:GetDomainPermissionsPolicy",
1310639
+ "codeartifact:GetRepositoryPermissionsPolicy",
1310640
+ "codeartifact:List*",
1310641
+ "codebuild:BatchGetFleets",
1310642
+ "codebuild:List*",
1310643
+ "codecommit:GetRepository",
1310644
+ "codecommit:GetRepositoryTriggers",
1310645
+ "codedeploy:BatchGetDeployments",
1310646
+ "codedeploy:BatchGetDeploymentTargets",
1310647
+ "codedeploy:GetApplication",
1310648
+ "codedeploy:GetDeploymentConfig",
1310649
+ "codedeploy:GetDeploymentTarget",
1310650
+ "codedeploy:List*",
1310651
+ "codeguru-profiler:Describe*",
1310652
+ "codeguru-profiler:GetNotificationConfiguration",
1310653
+ "codeguru-profiler:GetPolicy",
1310654
+ "codeguru-profiler:List*",
1310655
+ "codeguru-reviewer:Describe*",
1310656
+ "codeguru-reviewer:List*",
1310657
+ "codepipeline:GetPipeline",
1310658
+ "codepipeline:GetPipelineState",
1310659
+ "codepipeline:List*",
1310660
+ "codestar-connections:GetConnection",
1310661
+ "codestar-connections:GetRepositoryLink",
1310662
+ "codestar-connections:GetSyncConfiguration",
1310663
+ "codestar-connections:List*",
1310664
+ "codestar-notifications:Describe*",
1310665
+ "codestar-notifications:List*",
1310666
+ "cognito-identity:DescribeIdentityPool",
1310667
+ "cognito-identity:GetIdentityPoolRoles",
1310668
+ "cognito-identity:ListIdentityPools",
1310669
+ "cognito-identity:ListTagsForResource",
1310670
+ "cognito-idp:AdminListGroupsForUser",
1310671
+ "cognito-idp:DescribeIdentityProvider",
1310672
+ "cognito-idp:DescribeResourceServer",
1310673
+ "cognito-idp:DescribeRiskConfiguration",
1310674
+ "cognito-idp:DescribeUserImportJob",
1310675
+ "cognito-idp:DescribeUserPool",
1310676
+ "cognito-idp:DescribeUserPoolDomain",
1310677
+ "cognito-idp:GetGroup",
1310678
+ "cognito-idp:GetLogDeliveryConfiguration",
1310679
+ "cognito-idp:GetUICustomization",
1310680
+ "cognito-idp:GetUserPoolMfaConfig",
1310681
+ "cognito-idp:GetWebACLForResource",
1310682
+ "cognito-idp:ListGroups",
1310683
+ "cognito-idp:ListIdentityProviders",
1310684
+ "cognito-idp:ListResourceServers",
1310685
+ "cognito-idp:ListUserPoolClients",
1310686
+ "cognito-idp:ListUserPools",
1310687
+ "cognito-idp:ListTagsForResource",
1310688
+ "comprehend:Describe*",
1310689
+ "comprehend:List*",
1310690
+ "config:Describe*",
1310691
+ "config:GetStoredQuery",
1310692
+ "config:List*",
1310693
+ "connect:Describe*",
1310694
+ "connect:GetTaskTemplate",
1310695
+ "connect:List*",
1310696
+ "databrew:Describe*",
1310697
+ "databrew:List*",
1310698
+ "datapipeline:Describe*",
1310699
+ "datapipeline:GetPipelineDefinition",
1310700
+ "datapipeline:List*",
1310701
+ "datasync:Describe*",
1310702
+ "datasync:List*",
1310703
+ "deadline:GetFarm",
1310704
+ "deadline:GetFleet",
1310705
+ "deadline:GetLicenseEndpoint",
1310706
+ "deadline:GetMonitor",
1310707
+ "deadline:GetQueue",
1310708
+ "deadline:GetQueueEnvironment",
1310709
+ "deadline:GetQueueFleetAssociation",
1310710
+ "deadline:GetStorageProfile",
1310711
+ "deadline:List*",
1310712
+ "detective:GetMembers",
1310713
+ "detective:List*",
1310714
+ "devicefarm:GetDevicePool",
1310715
+ "devicefarm:GetInstanceProfile",
1310716
+ "devicefarm:GetNetworkProfile",
1310717
+ "devicefarm:GetProject",
1310718
+ "devicefarm:GetTestGridProject",
1310719
+ "devicefarm:GetVPCEConfiguration",
1310720
+ "devicefarm:List*",
1310721
+ "devops-guru:Describe*",
1310722
+ "devops-guru:GetResourceCollection",
1310723
+ "devops-guru:List*",
1310724
+ "dms:Describe*",
1310725
+ "dms:List*",
1310726
+ "ds:Describe*",
1310727
+ "dynamodb:Describe*",
1310728
+ "dynamodb:GetResourcePolicy",
1310729
+ "dynamodb:List*",
1310730
+ "ec2:Describe*",
1310731
+ "ec2:GetAssociatedEnclaveCertificateIamRoles",
1310732
+ "ec2:GetIpamPoolAllocations",
1310733
+ "ec2:GetIpamPoolCidrs",
1310734
+ "ec2:GetManagedPrefixListEntries",
1310735
+ "ec2:GetNetworkInsightsAccessScopeContent",
1310736
+ "ec2:GetSnapshotBlockPublicAccessState",
1310737
+ "ec2:GetTransitGatewayMulticastDomainAssociations",
1310738
+ "ec2:GetTransitGatewayRouteTableAssociations",
1310739
+ "ec2:GetTransitGatewayRouteTablePropagations",
1310740
+ "ec2:GetVerifiedAccessEndpointPolicy",
1310741
+ "ec2:GetVerifiedAccessGroupPolicy",
1310742
+ "ec2:GetVerifiedAccessInstanceWebAcl",
1310743
+ "ec2:SearchLocalGatewayRoutes",
1310744
+ "ec2:SearchTransitGatewayRoutes",
1310745
+ "ecr:Describe*",
1310746
+ "ecr:GetLifecyclePolicy",
1310747
+ "ecr:GetRegistryPolicy",
1310748
+ "ecr:GetRepositoryPolicy",
1310749
+ "ecr:List*",
1310750
+ "ecs:Describe*",
1310751
+ "ecs:List*",
1310752
+ "eks:AccessKubernetesApi",
1310753
+ "eks:Describe*",
1310754
+ "eks:List*",
1310755
+ "elasticache:Describe*",
1310756
+ "elasticache:List*",
1310757
+ "elasticbeanstalk:Describe*",
1310758
+ "elasticbeanstalk:List*",
1310759
+ "elasticfilesystem:Describe*",
1310760
+ "elasticloadbalancing:GetResourcePolicy",
1310761
+ "elasticloadbalancing:GetTrustStoreCaCertificatesBundle",
1310762
+ "elasticloadbalancing:GetTrustStoreRevocationContent",
1310763
+ "elasticloadbalancing:Describe*",
1310764
+ "elasticmapreduce:Describe*",
1310765
+ "elasticmapreduce:List*",
1310766
+ "emr-containers:Describe*",
1310767
+ "emr-containers:List*",
1310768
+ "emr-serverless:GetApplication",
1310769
+ "emr-serverless:List*",
1310770
+ "es:Describe*",
1310771
+ "es:List*",
1310772
+ "events:Describe*",
1310773
+ "events:List*",
1310774
+ "evidently:GetExperiment",
1310775
+ "evidently:GetFeature",
1310776
+ "evidently:GetLaunch",
1310777
+ "evidently:GetProject",
1310778
+ "evidently:GetSegment",
1310779
+ "evidently:List*",
1310780
+ "firehose:Describe*",
1310781
+ "firehose:List*",
1310782
+ "fis:GetExperimentTemplate",
1310783
+ "fis:GetTargetAccountConfiguration",
1310784
+ "fis:List*",
1310785
+ "fms:GetNotificationChannel",
1310786
+ "fms:GetPolicy",
1310787
+ "fms:List*",
1310788
+ "forecast:Describe*",
1310789
+ "forecast:List*",
1310790
+ "frauddetector:BatchGetVariable",
1310791
+ "frauddetector:Describe*",
1310792
+ "frauddetector:GetDetectors",
1310793
+ "frauddetector:GetDetectorVersion",
1310794
+ "frauddetector:GetEntityTypes",
1310795
+ "frauddetector:GetEventTypes",
1310796
+ "frauddetector:GetExternalModels",
1310797
+ "frauddetector:GetLabels",
1310798
+ "frauddetector:GetListElements",
1310799
+ "frauddetector:GetListsMetadata",
1310800
+ "frauddetector:GetModelVersion",
1310801
+ "frauddetector:GetOutcomes",
1310802
+ "frauddetector:GetRules",
1310803
+ "frauddetector:GetVariables",
1310804
+ "frauddetector:List*",
1310805
+ "fsx:Describe*",
1310806
+ "gamelift:Describe*",
1310807
+ "gamelift:List*",
1310808
+ "globalaccelerator:Describe*",
1310809
+ "globalaccelerator:List*",
1310810
+ "glue:GetDatabase",
1310811
+ "glue:GetDatabases",
1310812
+ "glue:GetJob",
1310813
+ "glue:GetRegistry",
1310814
+ "glue:GetSchema",
1310815
+ "glue:GetSchemaVersion",
1310816
+ "glue:GetTable",
1310817
+ "glue:GetTags",
1310818
+ "glue:GetTrigger",
1310819
+ "glue:List*",
1310820
+ "glue:querySchemaVersionMetadata",
1310821
+ "grafana:Describe*",
1310822
+ "grafana:List*",
1310823
+ "greengrass:Describe*",
1310824
+ "greengrass:GetDeployment",
1310825
+ "greengrass:List*",
1310826
+ "groundstation:GetConfig",
1310827
+ "groundstation:GetDataflowEndpointGroup",
1310828
+ "groundstation:GetMissionProfile",
1310829
+ "groundstation:List*",
1310830
+ "guardduty:GetDetector",
1310831
+ "guardduty:GetFilter",
1310832
+ "guardduty:GetIPSet",
1310833
+ "guardduty:GetMalwareProtectionPlan",
1310834
+ "guardduty:GetMasterAccount",
1310835
+ "guardduty:GetMembers",
1310836
+ "guardduty:GetThreatIntelSet",
1310837
+ "guardduty:List*",
1310838
+ "health:DescribeEvents",
1310839
+ "health:DescribeEventDetails",
1310840
+ "health:DescribeAffectedEntities",
1310841
+ "healthlake:Describe*",
1310842
+ "healthlake:List*",
1310843
+ "iam:GetGroup",
1310844
+ "iam:GetGroupPolicy",
1310845
+ "iam:GetInstanceProfile",
1310846
+ "iam:GetLoginProfile",
1310847
+ "iam:GetOpenIDConnectProvider",
1310848
+ "iam:GetPolicy",
1310849
+ "iam:GetPolicyVersion",
1310850
+ "iam:GetRole",
1310851
+ "iam:GetRolePolicy",
1310852
+ "iam:GetSAMLProvider",
1310853
+ "iam:GetServerCertificate",
1310854
+ "iam:GetServiceLinkedRoleDeletionStatus",
1310855
+ "iam:GetUser",
1310856
+ "iam:GetUserPolicy",
1310857
+ "iam:ListAttachedRolePolicies",
1310858
+ "iam:ListOpenIDConnectProviders",
1310859
+ "iam:ListRolePolicies",
1310860
+ "iam:ListRoles",
1310861
+ "iam:ListServerCertificates",
1310862
+ "iam:ListVirtualMFADevices",
1310863
+ "identitystore:DescribeGroup",
1310864
+ "identitystore:DescribeGroupMembership",
1310865
+ "identitystore:ListGroupMemberships",
1310866
+ "identitystore:ListGroups",
1310867
+ "imagebuilder:GetComponent",
1310868
+ "imagebuilder:GetContainerRecipe",
1310869
+ "imagebuilder:GetDistributionConfiguration",
1310870
+ "imagebuilder:GetImage",
1310871
+ "imagebuilder:GetImagePipeline",
1310872
+ "imagebuilder:GetImageRecipe",
1310873
+ "imagebuilder:GetInfrastructureConfiguration",
1310874
+ "imagebuilder:GetLifecyclePolicy",
1310875
+ "imagebuilder:GetWorkflow",
1310876
+ "imagebuilder:List*",
1310877
+ "inspector2:List*",
1310878
+ "inspector:Describe*",
1310879
+ "inspector:List*",
1310880
+ "internetmonitor:GetMonitor",
1310881
+ "internetmonitor:List*",
1310882
+ "iot:Describe*",
1310883
+ "iot:GetPackage",
1310884
+ "iot:GetPackageVersion",
1310885
+ "iot:GetPolicy",
1310886
+ "iot:GetThingShadow",
1310887
+ "iot:GetTopicRule",
1310888
+ "iot:GetTopicRuleDestination",
1310889
+ "iot:GetV2LoggingOptions",
1310890
+ "iot:List*",
1310891
+ "iotanalytics:Describe*",
1310892
+ "iotanalytics:List*",
1310893
+ "iotevents:Describe*",
1310894
+ "iotevents:List*",
1310895
+ "iotsitewise:Describe*",
1310896
+ "iotsitewise:List*",
1310897
+ "iotwireless:GetDestination",
1310898
+ "iotwireless:GetDeviceProfile",
1310899
+ "iotwireless:GetFuotaTask",
1310900
+ "iotwireless:GetMulticastGroup",
1310901
+ "iotwireless:GetNetworkAnalyzerConfiguration",
1310902
+ "iotwireless:GetServiceProfile",
1310903
+ "iotwireless:GetWirelessDevice",
1310904
+ "iotwireless:GetWirelessGateway",
1310905
+ "iotwireless:GetWirelessGatewayTaskDefinition",
1310906
+ "iotwireless:List*",
1310907
+ "ivs:GetChannel",
1310908
+ "ivs:GetEncoderConfiguration",
1310909
+ "ivs:GetPlaybackRestrictionPolicy",
1310910
+ "ivs:GetRecordingConfiguration",
1310911
+ "ivs:GetStage",
1310912
+ "ivs:List*",
1310913
+ "ivschat:GetLoggingConfiguration",
1310914
+ "ivschat:GetRoom",
1310915
+ "ivschat:List*",
1310916
+ "kafka:Describe*",
1310917
+ "kafka:GetClusterPolicy",
1310918
+ "kafka:List*",
1310919
+ "kafkaconnect:Describe*",
1310920
+ "kafkaconnect:List*",
1310921
+ "kendra:Describe*",
1310922
+ "kendra:List*",
1310923
+ "kinesis:Describe*",
1310924
+ "kinesis:GetResourcePolicy",
1310925
+ "kinesis:List*",
1310926
+ "kinesisanalytics:Describe*",
1310927
+ "kinesisanalytics:List*",
1310928
+ "kinesisvideo:Describe*",
1310929
+ "kms:DescribeKey",
1310930
+ "kms:ListResourceTags",
1310931
+ "kms:ListKeys",
1310932
+ "kms:GetKeyPolicy",
1310933
+ "kms:GetKeyRotationStatus",
1310934
+ "kms:ListAliases",
1310935
+ "kms:ListKeyRotations",
1310936
+ "lakeformation:Describe*",
1310937
+ "lakeformation:GetLFTag",
1310938
+ "lakeformation:GetResourceLFTags",
1310939
+ "lakeformation:List*",
1310940
+ "lambda:GetAlias",
1310941
+ "lambda:GetCodeSigningConfig",
1310942
+ "lambda:GetEventSourceMapping",
1310943
+ "lambda:GetFunctionCodeSigningConfig",
1310944
+ "lambda:GetFunctionConfiguration",
1310945
+ "lambda:GetFunctionEventInvokeConfig",
1310946
+ "lambda:GetFunctionRecursionConfig",
1310947
+ "lambda:GetFunctionUrlConfig",
1310948
+ "lambda:GetLayerVersion",
1310949
+ "lambda:GetLayerVersionPolicy",
1310950
+ "lambda:GetPolicy",
1310951
+ "lambda:GetProvisionedConcurrencyConfig",
1310952
+ "lambda:GetRuntimeManagementConfig",
1310953
+ "lambda:List*",
1310954
+ "launchwizard:GetDeployment",
1310955
+ "launchwizard:List*",
1310956
+ "license-manager:GetLicense",
1310957
+ "license-manager:List*",
1310958
+ "lightsail:GetAlarms",
1310959
+ "lightsail:GetBuckets",
1310960
+ "lightsail:GetCertificates",
1310961
+ "lightsail:GetContainerServices",
1310962
+ "lightsail:GetDisk",
1310963
+ "lightsail:GetDisks",
1310964
+ "lightsail:GetInstance",
1310965
+ "lightsail:GetInstances",
1310966
+ "lightsail:GetLoadBalancer",
1310967
+ "lightsail:GetLoadBalancers",
1310968
+ "lightsail:GetLoadBalancerTlsCertificates",
1310969
+ "lightsail:GetStaticIp",
1310970
+ "lightsail:GetStaticIps",
1310971
+ "logs:Describe*",
1310972
+ "logs:FilterLogEvents",
1310973
+ "logs:GetDataProtectionPolicy",
1310974
+ "logs:GetDelivery",
1310975
+ "logs:GetDeliveryDestination",
1310976
+ "logs:GetDeliveryDestinationPolicy",
1310977
+ "logs:GetDeliverySource",
1310978
+ "logs:GetLogAnomalyDetector",
1310979
+ "logs:GetLogDelivery",
1310980
+ "logs:GetLogGroupFields",
1310981
+ "logs:GetQueryResults",
1310982
+ "logs:List*",
1310983
+ "logs:StartQuery",
1310984
+ "logs:StopLiveTail",
1310985
+ "logs:StopQuery",
1310986
+ "logs:TestMetricFilter",
1310987
+ "m2:GetApplication",
1310988
+ "m2:GetEnvironment",
1310989
+ "m2:List*",
1310990
+ "macie2:GetAllowList",
1310991
+ "macie2:GetCustomDataIdentifier",
1310992
+ "macie2:GetFindingsFilter",
1310993
+ "macie2:GetMacieSession",
1310994
+ "macie2:List*",
1310995
+ "mediaconnect:Describe*",
1310996
+ "mediaconnect:List*",
1310997
+ "medialive:Describe*",
1310998
+ "medialive:GetCloudWatchAlarmTemplate",
1310999
+ "medialive:GetCloudWatchAlarmTemplateGroup",
1311000
+ "medialive:GetEventBridgeRuleTemplate",
1311001
+ "medialive:GetEventBridgeRuleTemplateGroup",
1311002
+ "medialive:GetSignalMap",
1311003
+ "medialive:List*",
1311004
+ "mediapackage-vod:Describe*",
1311005
+ "mediapackage-vod:List*",
1311006
+ "mediapackage:Describe*",
1311007
+ "mediapackage:List*",
1311008
+ "mediapackagev2:GetChannel",
1311009
+ "mediapackagev2:GetChannelGroup",
1311010
+ "mediapackagev2:GetChannelPolicy",
1311011
+ "mediapackagev2:GetOriginEndpoint",
1311012
+ "mediapackagev2:GetOriginEndpointPolicy",
1311013
+ "mediapackagev2:List*",
1311014
+ "memorydb:Describe*",
1311015
+ "memorydb:List*",
1311016
+ "mobiletargeting:GetInAppTemplate",
1311017
+ "mobiletargeting:List*",
1311018
+ "mq:Describe*",
1311019
+ "mq:List*",
1311020
+ "network-firewall:Describe*",
1311021
+ "network-firewall:List*",
1311022
+ "networkmanager:Describe*",
1311023
+ "networkmanager:GetConnectAttachment",
1311024
+ "networkmanager:GetConnectPeer",
1311025
+ "networkmanager:GetCoreNetwork",
1311026
+ "networkmanager:GetCoreNetworkPolicy",
1311027
+ "networkmanager:GetCustomerGatewayAssociations",
1311028
+ "networkmanager:GetDevices",
1311029
+ "networkmanager:GetLinkAssociations",
1311030
+ "networkmanager:GetLinks",
1311031
+ "networkmanager:GetSites",
1311032
+ "networkmanager:GetSiteToSiteVpnAttachment",
1311033
+ "networkmanager:GetTransitGatewayPeering",
1311034
+ "networkmanager:GetTransitGatewayRegistrations",
1311035
+ "networkmanager:GetTransitGatewayRouteTableAttachment",
1311036
+ "networkmanager:GetVpcAttachment",
1311037
+ "networkmanager:List*",
1311038
+ "oam:GetLink",
1311039
+ "oam:GetSink",
1311040
+ "oam:GetSinkPolicy",
1311041
+ "oam:List*",
1311042
+ "omics:GetAnnotationStore",
1311043
+ "omics:GetReferenceStore",
1311044
+ "omics:GetRunGroup",
1311045
+ "omics:GetSequenceStore",
1311046
+ "omics:GetVariantStore",
1311047
+ "omics:GetWorkflow",
1311048
+ "omics:List*",
1311049
+ "organizations:Describe*",
1311050
+ "organizations:List*",
1311051
+ "osis:GetPipeline",
1311052
+ "osis:List*",
1311053
+ "payment-cryptography:GetAlias",
1311054
+ "payment-cryptography:GetKey",
1311055
+ "payment-cryptography:List*",
1311056
+ "pca-connector-ad:GetConnector",
1311057
+ "pca-connector-ad:GetDirectoryRegistration",
1311058
+ "pca-connector-ad:GetServicePrincipalName",
1311059
+ "pca-connector-ad:GetTemplate",
1311060
+ "pca-connector-ad:GetTemplateGroupAccessControlEntry",
1311061
+ "pca-connector-ad:List*",
1311062
+ "pca-connector-scep:GetChallengeMetadata",
1311063
+ "pca-connector-scep:GetConnector",
1311064
+ "pca-connector-scep:List*",
1311065
+ "personalize:Describe*",
1311066
+ "personalize:List*",
1311067
+ "pi:Describe*",
1311068
+ "pi:Get*",
1311069
+ "pi:List*",
1311070
+ "pipes:Describe*",
1311071
+ "pipes:List*",
1311072
+ "proton:GetEnvironmentTemplate",
1311073
+ "proton:GetServiceTemplate",
1311074
+ "proton:List*",
1311075
+ "qbusiness:GetApplication",
1311076
+ "qbusiness:GetDataSource",
1311077
+ "qbusiness:GetIndex",
1311078
+ "qbusiness:GetPlugin",
1311079
+ "qbusiness:GetRetriever",
1311080
+ "qbusiness:GetWebExperience",
1311081
+ "qbusiness:List*",
1311082
+ "ram:GetPermission",
1311083
+ "ram:GetResourceShares",
1311084
+ "ram:List*",
1311085
+ "rds:Describe*",
1311086
+ "rds:List*",
1311087
+ "redshift-serverless:GetNamespace",
1311088
+ "redshift-serverless:GetWorkgroup",
1311089
+ "redshift-serverless:List*",
1311090
+ "redshift:Describe*",
1311091
+ "refactor-spaces:GetApplication",
1311092
+ "refactor-spaces:GetEnvironment",
1311093
+ "refactor-spaces:GetRoute",
1311094
+ "refactor-spaces:List*",
1311095
+ "rekognition:Describe*",
1311096
+ "rekognition:List*",
1311097
+ "resiliencehub:Describe*",
1311098
+ "resiliencehub:List*",
1311099
+ "resource-explorer-2:GetDefaultView",
1311100
+ "resource-explorer-2:GetIndex",
1311101
+ "resource-explorer-2:GetView",
1311102
+ "resource-explorer-2:List*",
1311103
+ "resource-explorer-2:Search",
1311104
+ "resource-groups:GetGroup",
1311105
+ "resource-groups:GetGroupConfiguration",
1311106
+ "resource-groups:GetGroupQuery",
1311107
+ "resource-groups:GetTags",
1311108
+ "resource-groups:List*",
1311109
+ "route53-recovery-control-config:Describe*",
1311110
+ "route53-recovery-control-config:List*",
1311111
+ "route53-recovery-readiness:GetCell",
1311112
+ "route53-recovery-readiness:GetReadinessCheck",
1311113
+ "route53-recovery-readiness:GetRecoveryGroup",
1311114
+ "route53-recovery-readiness:GetResourceSet",
1311115
+ "route53-recovery-readiness:List*",
1311116
+ "route53:GetDNSSEC",
1311117
+ "route53:GetHealthCheck",
1311118
+ "route53:GetHealthCheckStatus",
1311119
+ "route53:GetHostedZone",
1311120
+ "route53:List*",
1311121
+ "route53profiles:GetProfile",
1311122
+ "route53profiles:GetProfileAssociation",
1311123
+ "route53profiles:GetProfileResourceAssociation",
1311124
+ "route53profiles:List*",
1311125
+ "route53resolver:GetFirewallDomainList",
1311126
+ "route53resolver:GetFirewallRuleGroup",
1311127
+ "route53resolver:GetFirewallRuleGroupAssociation",
1311128
+ "route53resolver:GetOutpostResolver",
1311129
+ "route53resolver:GetResolverConfig",
1311130
+ "route53resolver:GetResolverQueryLogConfig",
1311131
+ "route53resolver:GetResolverQueryLogConfigAssociation",
1311132
+ "route53resolver:GetResolverRule",
1311133
+ "route53resolver:GetResolverRuleAssociation",
1311134
+ "route53resolver:List*",
1311135
+ "rum:GetAppMonitor",
1311136
+ "rum:List*",
1311137
+ "s3-outposts:ListEndpoints",
1311138
+ "s3-outposts:ListOutpostsWithS3",
1311139
+ "s3:GetAccessGrant",
1311140
+ "s3:GetAccessGrantsInstance",
1311141
+ "s3:GetAccessGrantsLocation",
1311142
+ "s3:GetAccessPoint",
1311143
+ "s3:GetAccessPointConfigurationForObjectLambda",
1311144
+ "s3:GetAccessPointForObjectLambda",
1311145
+ "s3:GetAccessPointPolicy",
1311146
+ "s3:GetAccessPointPolicyForObjectLambda",
1311147
+ "s3:GetAccessPointPolicyStatusForObjectLambda",
1311148
+ "s3:GetBucketAbac",
1311149
+ "s3:GetBucketAcl",
1311150
+ "s3:GetBucketCORS",
1311151
+ "s3:GetBucketLocation",
1311152
+ "s3:GetBucketLogging",
1311153
+ "s3:GetBucketMetadataTableConfiguration",
1311154
+ "s3:GetBucketNotification",
1311155
+ "s3:GetBucketObjectLockConfiguration",
1311156
+ "s3:GetBucketOwnershipControls",
1311157
+ "s3:GetBucketPolicy",
1311158
+ "s3:GetBucketPublicAccessBlock",
1311159
+ "s3:GetBucketTagging",
1311160
+ "s3:GetBucketVersioning",
1311161
+ "s3:GetEncryptionConfiguration",
1311162
+ "s3:GetLifecycleConfiguration",
1311163
+ "s3:GetMultiRegionAccessPoint",
1311164
+ "s3:GetMultiRegionAccessPointPolicy",
1311165
+ "s3:GetMultiRegionAccessPointPolicyStatus",
1311166
+ "s3:GetReplicationConfiguration",
1311167
+ "s3:GetStorageLensConfiguration",
1311168
+ "s3:GetStorageLensConfigurationTagging",
1311169
+ "s3:GetStorageLensGroup",
1311170
+ "s3:ListAllMyBuckets",
1311171
+ "sagemaker:Describe*",
1311172
+ "sagemaker:List*",
1311173
+ "scheduler:GetSchedule",
1311174
+ "scheduler:GetScheduleGroup",
1311175
+ "scheduler:List*",
1311176
+ "schemas:Describe*",
1311177
+ "schemas:GetResourcePolicy",
1311178
+ "schemas:List*",
1311179
+ "secretsmanager:Describe*",
1311180
+ "secretsmanager:GetResourcePolicy",
1311181
+ "secretsmanager:List*",
1311182
+ "securityhub:BatchGetAutomationRules",
1311183
+ "securityhub:BatchGetSecurityControls",
1311184
+ "securityhub:Describe*",
1311185
+ "securityhub:GetConfigurationPolicy",
1311186
+ "securityhub:GetConfigurationPolicyAssociation",
1311187
+ "securityhub:GetEnabledStandards",
1311188
+ "securityhub:GetFindingAggregator",
1311189
+ "securityhub:GetFindings",
1311190
+ "securityhub:GetInsights",
1311191
+ "securityhub:List*",
1311192
+ "securitylake:GetSubscriber",
1311193
+ "securitylake:List*",
1311194
+ "servicecatalog:Describe*",
1311195
+ "servicecatalog:GetApplication",
1311196
+ "servicecatalog:GetAttributeGroup",
1311197
+ "servicecatalog:List*",
1311198
+ "servicequotas:GetServiceQuota",
1311199
+ "servicequotas:ListServiceQuotas",
1311200
+ "ses:Describe*",
1311201
+ "ses:GetAccount",
1311202
+ "ses:GetAddonInstance",
1311203
+ "ses:GetAddonSubscription",
1311204
+ "ses:GetArchive",
1311205
+ "ses:GetConfigurationSet",
1311206
+ "ses:GetConfigurationSetEventDestinations",
1311207
+ "ses:GetContactList",
1311208
+ "ses:GetDedicatedIpPool",
1311209
+ "ses:GetDedicatedIps",
1311210
+ "ses:GetEmailIdentity",
1311211
+ "ses:GetEmailTemplate",
1311212
+ "ses:GetIngressPoint",
1311213
+ "ses:GetRelay",
1311214
+ "ses:GetRuleSet",
1311215
+ "ses:GetTemplate",
1311216
+ "ses:GetTrafficPolicy",
1311217
+ "ses:List*",
1311218
+ "shield:Describe*",
1311219
+ "shield:List*",
1311220
+ "signer:GetSigningProfile",
1311221
+ "signer:List*",
1311222
+ "sns:GetDataProtectionPolicy",
1311223
+ "sns:GetSubscriptionAttributes",
1311224
+ "sns:GetTopicAttributes",
1311225
+ "sns:List*",
1311226
+ "sqs:GetQueueAttributes",
1311227
+ "sqs:GetQueueUrl",
1311228
+ "sqs:List*",
1311229
+ "ssm-contacts:GetContact",
1311230
+ "ssm-contacts:GetContactChannel",
1311231
+ "ssm-contacts:List*",
1311232
+ "ssm-incidents:GetReplicationSet",
1311233
+ "ssm-incidents:GetResponsePlan",
1311234
+ "ssm-incidents:List*",
1311235
+ "ssm-sap:GetApplication",
1311236
+ "ssm-sap:List*",
1311237
+ "ssm:Describe*",
1311238
+ "ssm:GetDefaultPatchBaseline",
1311239
+ "ssm:GetDocument",
1311240
+ "ssm:GetParameters",
1311241
+ "ssm:GetPatchBaseline",
1311242
+ "ssm:GetResourcePolicies",
1311243
+ "ssm:List*",
1311244
+ "sso:GetInlinePolicyForPermissionSet",
1311245
+ "sso:GetManagedApplicationInstance",
1311246
+ "sso:GetPermissionsBoundaryForPermissionSet",
1311247
+ "sso:GetSharedSsoConfiguration",
1311248
+ "sso:ListAccountAssignments",
1311249
+ "sso:ListApplicationAssignments",
1311250
+ "sso:ListApplications",
1311251
+ "sso:ListCustomerManagedPolicyReferencesInPermissionSet",
1311252
+ "sso:ListInstances",
1311253
+ "sso:ListManagedPoliciesInPermissionSet",
1311254
+ "sso:ListTagsForResource",
1311255
+ "states:GetExecutionHistory",
1311256
+ "states:Describe*",
1311257
+ "states:List*",
1311258
+ "support:CreateCase",
1311259
+ "support:DescribeCases",
1311260
+ "synthetics:Describe*",
1311261
+ "synthetics:GetCanary",
1311262
+ "synthetics:GetCanaryRuns",
1311263
+ "synthetics:GetGroup",
1311264
+ "synthetics:List*",
1311265
+ "tag:GetResources",
1311266
+ "timestream:Describe*",
1311267
+ "timestream:List*",
1311268
+ "transfer:Describe*",
1311269
+ "transfer:List*",
1311270
+ "verifiedpermissions:GetIdentitySource",
1311271
+ "verifiedpermissions:GetPolicy",
1311272
+ "verifiedpermissions:GetPolicyStore",
1311273
+ "verifiedpermissions:GetPolicyTemplate",
1311274
+ "verifiedpermissions:GetSchema",
1311275
+ "verifiedpermissions:List*",
1311276
+ "vpc-lattice:GetAccessLogSubscription",
1311277
+ "vpc-lattice:GetAuthPolicy",
1311278
+ "vpc-lattice:GetListener",
1311279
+ "vpc-lattice:GetResourcePolicy",
1311280
+ "vpc-lattice:GetRule",
1311281
+ "vpc-lattice:GetService",
1311282
+ "vpc-lattice:GetServiceNetwork",
1311283
+ "vpc-lattice:GetServiceNetworkServiceAssociation",
1311284
+ "vpc-lattice:GetServiceNetworkVpcAssociation",
1311285
+ "vpc-lattice:GetTargetGroup",
1311286
+ "vpc-lattice:List*",
1311287
+ "wafv2:GetIPSet",
1311288
+ "wafv2:GetLoggingConfiguration",
1311289
+ "wafv2:GetRegexPatternSet",
1311290
+ "wafv2:GetRuleGroup",
1311291
+ "wafv2:GetWebACL",
1311292
+ "wafv2:GetWebACLForResource",
1311293
+ "wafv2:List*",
1311294
+ "workspaces-web:GetBrowserSettings",
1311295
+ "workspaces-web:GetIdentityProvider",
1311296
+ "workspaces-web:GetNetworkSettings",
1311297
+ "workspaces-web:GetPortal",
1311298
+ "workspaces-web:GetPortalServiceProviderMetadata",
1311299
+ "workspaces-web:GetTrustStore",
1311300
+ "workspaces-web:GetUserAccessLoggingSettings",
1311301
+ "workspaces-web:GetUserSettings",
1311302
+ "workspaces-web:List*",
1311303
+ "workspaces:Describe*",
1311304
+ "xray:BatchGetTraces",
1311305
+ "xray:GetGroup",
1311306
+ "xray:GetGroups",
1311307
+ "xray:GetSamplingRules",
1311308
+ "xray:GetServiceGraph",
1311309
+ "xray:GetTraceSummaries",
1311310
+ "xray:List*"
1311311
+ ],
1311312
+ "Resource": "*"
1311313
+ },
1311314
+ {
1311315
+ "Sid": "AIOPSAPIGatewayAccess",
1311316
+ "Effect": "Allow",
1311317
+ "Action": [
1311318
+ "apigateway:GET"
1311319
+ ],
1311320
+ "Resource": [
1311321
+ "arn:aws:apigateway:*::/restapis",
1311322
+ "arn:aws:apigateway:*::/restapis/*",
1311323
+ "arn:aws:apigateway:*::/restapis/*/deployments",
1311324
+ "arn:aws:apigateway:*::/restapis/*/deployments/*",
1311325
+ "arn:aws:apigateway:*::/restapis/*/resources/*/methods/*/integrations",
1311326
+ "arn:aws:apigateway:*::/restapis/*/resources/*/methods/*/integrations/*",
1311327
+ "arn:aws:apigateway:*::/restapis/*/stages",
1311328
+ "arn:aws:apigateway:*::/restapis/*/stages/*",
1311329
+ "arn:aws:apigateway:*::/apis",
1311330
+ "arn:aws:apigateway:*::/apis/*",
1311331
+ "arn:aws:apigateway:*::/apis/*/deployments",
1311332
+ "arn:aws:apigateway:*::/apis/*/deployments/*",
1311333
+ "arn:aws:apigateway:*::/apis/*/integrations",
1311334
+ "arn:aws:apigateway:*::/apis/*/integrations/*",
1311335
+ "arn:aws:apigateway:*::/apis/*/stages",
1311336
+ "arn:aws:apigateway:*::/apis/*/stages/*",
1311337
+ "arn:aws:apigateway:*::/domainnames/*"
1311338
+ ]
1311339
+ }
1311340
+ ]
1311341
+ }
1310259
1311342
  }
1310260
1311343
  },
1310261
1311344
  "createdDate": "2026-03-26T03:42:09.000Z",
1310262
- "lastUpdatedDate": "2026-05-11T21:12:21.000Z"
1311345
+ "lastUpdatedDate": "2026-06-01T22:42:11.000Z"
1310263
1311346
  },
1310264
1311347
  "AIDevOpsOperatorAppAccessPolicy": {
1310265
1311348
  "arn": "arn:aws:iam::aws:policy/AIDevOpsOperatorAppAccessPolicy",
1310266
- "latestVersionId": "v4",
1310267
- "versionsCount": 4,
1311349
+ "latestVersionId": "v5",
1311350
+ "versionsCount": 5,
1310268
1311351
  "versions": {
1310269
1311352
  "v1": {
1310270
1311353
  "createdDate": "2026-03-26T03:42:13.000Z",
@@ -1310586,10 +1311669,115 @@
1310586
1311669
  }
1310587
1311670
  ]
1310588
1311671
  }
1311672
+ },
1311673
+ "v5": {
1311674
+ "createdDate": "2026-03-26T03:42:13.000Z",
1311675
+ "document": {
1311676
+ "Version": "2012-10-17",
1311677
+ "Statement": [
1311678
+ {
1311679
+ "Sid": "AllowOperatorAgentSpaceActions",
1311680
+ "Effect": "Allow",
1311681
+ "Action": [
1311682
+ "aidevops:GetAgentSpace",
1311683
+ "aidevops:GetAssociation",
1311684
+ "aidevops:ListAssociations",
1311685
+ "aidevops:CreateBacklogTask",
1311686
+ "aidevops:GetBacklogTask",
1311687
+ "aidevops:UpdateBacklogTask",
1311688
+ "aidevops:ListBacklogTasks",
1311689
+ "aidevops:ListJournalRecords",
1311690
+ "aidevops:DiscoverTopology",
1311691
+ "aidevops:ListGoals",
1311692
+ "aidevops:UpdateGoal",
1311693
+ "aidevops:ListRecommendations",
1311694
+ "aidevops:ListExecutions",
1311695
+ "aidevops:GetRecommendation",
1311696
+ "aidevops:UpdateRecommendation",
1311697
+ "aidevops:CreateKnowledgeItem",
1311698
+ "aidevops:ListKnowledgeItems",
1311699
+ "aidevops:ListKnowledgeItemVersions",
1311700
+ "aidevops:GetKnowledgeItem",
1311701
+ "aidevops:UpdateKnowledgeItem",
1311702
+ "aidevops:DeleteKnowledgeItem",
1311703
+ "aidevops:ListPendingMessages",
1311704
+ "aidevops:InitiateChatForCase",
1311705
+ "aidevops:EndChatForCase",
1311706
+ "aidevops:DescribeSupportLevel",
1311707
+ "aidevops:ListChats",
1311708
+ "aidevops:CreateChat",
1311709
+ "aidevops:SendMessage",
1311710
+ "aidevops:DescribeServices"
1311711
+ ],
1311712
+ "Resource": "arn:aws:aidevops:*:*:agentspace/${aws:PrincipalTag/AgentSpaceId}",
1311713
+ "Condition": {
1311714
+ "StringEquals": {
1311715
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1311716
+ }
1311717
+ }
1311718
+ },
1311719
+ {
1311720
+ "Sid": "AllowOperatorAccountActions",
1311721
+ "Effect": "Allow",
1311722
+ "Action": [
1311723
+ "aidevops:GetAccountUsage"
1311724
+ ],
1311725
+ "Resource": "*",
1311726
+ "Condition": {
1311727
+ "StringEquals": {
1311728
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1311729
+ }
1311730
+ }
1311731
+ },
1311732
+ {
1311733
+ "Sid": "AllowSupportOperatorActions",
1311734
+ "Effect": "Allow",
1311735
+ "Action": [
1311736
+ "support:DescribeCases",
1311737
+ "support:DescribeServices",
1311738
+ "support:InitiateChatForCase",
1311739
+ "support:DescribeSupportLevel"
1311740
+ ],
1311741
+ "Resource": "*",
1311742
+ "Condition": {
1311743
+ "StringEquals": {
1311744
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1311745
+ }
1311746
+ }
1311747
+ },
1311748
+ {
1311749
+ "Sid": "AllowSecretsManagerOperatorActions",
1311750
+ "Effect": "Allow",
1311751
+ "Action": [
1311752
+ "secretsmanager:CreateSecret",
1311753
+ "secretsmanager:ListSecrets"
1311754
+ ],
1311755
+ "Resource": "*",
1311756
+ "Condition": {
1311757
+ "StringEquals": {
1311758
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1311759
+ }
1311760
+ }
1311761
+ },
1311762
+ {
1311763
+ "Sid": "AllowTranscribeOperatorActions",
1311764
+ "Effect": "Allow",
1311765
+ "Action": [
1311766
+ "transcribe:StartStreamTranscriptionWebSocket"
1311767
+ ],
1311768
+ "Resource": "*",
1311769
+ "Condition": {
1311770
+ "StringEquals": {
1311771
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1311772
+ }
1311773
+ }
1311774
+ }
1311775
+ ]
1311776
+ }
1310589
1311777
  }
1310590
1311778
  },
1310591
1311779
  "createdDate": "2026-03-26T03:42:13.000Z",
1310592
- "lastUpdatedDate": "2026-05-22T00:12:17.000Z"
1311780
+ "lastUpdatedDate": "2026-06-01T22:42:21.000Z"
1310593
1311781
  },
1310594
1311782
  "AIDevOpsAgentFullAccess": {
1310595
1311783
  "arn": "arn:aws:iam::aws:policy/AIDevOpsAgentFullAccess",