Skip to content

Instantly share code, notes, and snippets.

@ptdel
Created June 28, 2019 18:02
Show Gist options
  • Save ptdel/059f6455fef203d9e86c02a6a523543f to your computer and use it in GitHub Desktop.
Save ptdel/059f6455fef203d9e86c02a6a523543f to your computer and use it in GitHub Desktop.
Every Single AWS IAM Action key/value pair (as of 6/28/2019)
[
'account:DisableRegion',
'account:EnableRegion',
'account:ListRegions',
'a4b:ApproveSkill',
'a4b:AssociateContactWithAddressBook',
'a4b:AssociateDeviceWithRoom',
'a4b:AssociateSkillGroupWithRoom',
'a4b:AssociateSkillWithSkillGroup',
'a4b:AssociateSkillWithUsers',
'a4b:CreateAddressBook',
'a4b:CreateBusinessReportSchedule',
'a4b:CreateConferenceProvider',
'a4b:CreateContact',
'a4b:CreateProfile',
'a4b:CreateRoom',
'a4b:CreateSkillGroup',
'a4b:CreateUser',
'a4b:DeleteAddressBook',
'a4b:DeleteBusinessReportSchedule',
'a4b:DeleteConferenceProvider',
'a4b:DeleteContact',
'a4b:DeleteDevice',
'a4b:DeleteProfile',
'a4b:DeleteRoom',
'a4b:DeleteRoomSkillParameter',
'a4b:DeleteSkillAuthorization',
'a4b:DeleteSkillGroup',
'a4b:DeleteUser',
'a4b:DisassociateContactFromAddressBook',
'a4b:DisassociateDeviceFromRoom',
'a4b:DisassociateSkillFromSkillGroup',
'a4b:DisassociateSkillFromUsers',
'a4b:DisassociateSkillGroupFromRoom',
'a4b:ForgetSmartHomeAppliances',
'a4b:GetAddressBook',
'a4b:GetConferencePreference',
'a4b:GetConferenceProvider',
'a4b:GetContact',
'a4b:GetDevice',
'a4b:GetProfile',
'a4b:GetRoom',
'a4b:GetRoomSkillParameter',
'a4b:GetSkillGroup',
'a4b:ListBusinessReportSchedules',
'a4b:ListConferenceProviders',
'a4b:ListDeviceEvents',
'a4b:ListSkills',
'a4b:ListSkillsStoreCategories',
'a4b:ListSkillsStoreSkillsByCategory',
'a4b:ListSmartHomeAppliances',
'a4b:ListTags',
'a4b:PutConferencePreference',
'a4b:PutRoomSkillParameter',
'a4b:PutSkillAuthorization',
'a4b:RegisterAVSDevice',
'a4b:RejectSkill',
'a4b:ResolveRoom',
'a4b:RevokeInvitation',
'a4b:SearchAddressBooks',
'a4b:SearchContacts',
'a4b:SearchDevices',
'a4b:SearchProfiles',
'a4b:SearchRooms',
'a4b:SearchSkillGroups',
'a4b:SearchUsers',
'a4b:SendInvitation',
'a4b:StartDeviceSync',
'a4b:StartSmartHomeApplianceDiscovery',
'a4b:TagResource',
'a4b:UntagResource',
'a4b:UpdateAddressBook',
'a4b:UpdateBusinessReportSchedule',
'a4b:UpdateConferenceProvider',
'a4b:UpdateContact',
'a4b:UpdateDevice',
'a4b:UpdateProfile',
'a4b:UpdateRoom',
'a4b:UpdateSkillGroup',
'amplify:CreateApp',
'amplify:CreateBranch',
'amplify:CreateDomainAssociation',
'amplify:DeleteApp',
'amplify:DeleteBranch',
'amplify:DeleteDomainAssociation',
'amplify:DeleteJob',
'amplify:GetApp',
'amplify:GetBranch',
'amplify:GetDomainAssociation',
'amplify:GetJob',
'amplify:ListApps',
'amplify:ListBranches',
'amplify:ListDomainAssociations',
'amplify:ListJobs',
'amplify:StartJob',
'amplify:StopJob',
'amplify:UpdateApp',
'amplify:UpdateBranch',
'amplify:UpdateDomainAssociation',
'execute-api:InvalidateCache',
'execute-api:Invoke',
'appmesh:CreateMesh',
'appmesh:CreateRoute',
'appmesh:CreateVirtualNode',
'appmesh:CreateVirtualRouter',
'appmesh:CreateVirtualService',
'appmesh:DeleteMesh',
'appmesh:DeleteRoute',
'appmesh:DeleteVirtualNode',
'appmesh:DeleteVirtualRouter',
'appmesh:DeleteVirtualService',
'appmesh:DescribeMesh',
'appmesh:DescribeRoute',
'appmesh:DescribeVirtualNode',
'appmesh:DescribeVirtualRouter',
'appmesh:DescribeVirtualService',
'appmesh:ListMeshes',
'appmesh:ListRoutes',
'appmesh:ListTagsForResource',
'appmesh:ListVirtualNodes',
'appmesh:ListVirtualRouters',
'appmesh:ListVirtualServices',
'appmesh:StreamAggregatedResources',
'appmesh:TagResource',
'appmesh:UntagResource',
'appmesh:UpdateMesh',
'appmesh:UpdateRoute',
'appmesh:UpdateVirtualNode',
'appmesh:UpdateVirtualRouter',
'appmesh:UpdateVirtualService',
'application-autoscaling:DeleteScalingPolicy',
'application-autoscaling:DeleteScheduledAction',
'application-autoscaling:DeregisterScalableTarget',
'application-autoscaling:DescribeScalableTargets',
'application-autoscaling:DescribeScalingActivities',
'application-autoscaling:DescribeScalingPolicies',
'application-autoscaling:DescribeScheduledActions',
'application-autoscaling:PutScalingPolicy',
'application-autoscaling:PutScheduledAction',
'application-autoscaling:RegisterScalableTarget',
'discovery:AssociateConfigurationItemsToApplication',
'discovery:BatchDeleteImportData',
'discovery:CreateApplication',
'discovery:CreateTags',
'discovery:DeleteApplications',
'discovery:DeleteTags',
'discovery:DescribeAgents',
'discovery:DescribeConfigurations',
'discovery:DescribeContinuousExports',
'discovery:DescribeExportConfigurations',
'discovery:DescribeExportTasks',
'discovery:DescribeImportTasks',
'discovery:DescribeTags',
'discovery:DisassociateConfigurationItemsFromApplication',
'discovery:ExportConfigurations',
'discovery:GetDiscoverySummary',
'discovery:ListConfigurations',
'discovery:ListServerNeighbors',
'discovery:StartContinuousExport',
'discovery:StartDataCollectionByAgentIds',
'discovery:StartExportTask',
'discovery:StartImportTask',
'discovery:StopContinuousExport',
'discovery:StopDataCollectionByAgentIds',
'discovery:UpdateApplication',
'appstream:AssociateFleet',
'appstream:BatchAssociateUserStack',
'appstream:BatchDisassociateUserStack',
'appstream:CopyImage',
'appstream:CreateDirectoryConfig',
'appstream:CreateFleet',
'appstream:CreateImageBuilder',
'appstream:CreateImageBuilderStreamingURL',
'appstream:CreateStack',
'appstream:CreateStreamingURL',
'appstream:CreateUsageReportSubscription',
'appstream:CreateUser',
'appstream:DeleteDirectoryConfig',
'appstream:DeleteFleet',
'appstream:DeleteImage',
'appstream:DeleteImageBuilder',
'appstream:DeleteImagePermissions',
'appstream:DeleteStack',
'appstream:DeleteUsageReportSubscription',
'appstream:DeleteUser',
'appstream:DescribeDirectoryConfigs',
'appstream:DescribeFleets',
'appstream:DescribeImageBuilders',
'appstream:DescribeImagePermissions',
'appstream:DescribeImages',
'appstream:DescribeSessions',
'appstream:DescribeStacks',
'appstream:DescribeUsageReportSubscriptions',
'appstream:DescribeUserStackAssociations',
'appstream:DescribeUsers',
'appstream:DisableUser',
'appstream:DisassociateFleet',
'appstream:EnableUser',
'appstream:ExpireSession',
'appstream:ListAssociatedFleets',
'appstream:ListAssociatedStacks',
'appstream:ListTagsForResource',
'appstream:StartFleet',
'appstream:StartImageBuilder',
'appstream:StopFleet',
'appstream:StopImageBuilder',
'appstream:Stream',
'appstream:TagResource',
'appstream:UntagResource',
'appstream:UpdateDirectoryConfig',
'appstream:UpdateFleet',
'appstream:UpdateImagePermissions',
'appstream:UpdateStack',
'appsync:CreateApiKey',
'appsync:CreateDataSource',
'appsync:CreateFunction',
'appsync:CreateGraphqlApi',
'appsync:CreateResolver',
'appsync:CreateType',
'appsync:DeleteApiKey',
'appsync:DeleteDataSource',
'appsync:DeleteFunction',
'appsync:DeleteGraphqlApi',
'appsync:DeleteResolver',
'appsync:DeleteType',
'appsync:GetDataSource',
'appsync:GetFunction',
'appsync:GetGraphqlApi',
'appsync:GetIntrospectionSchema',
'appsync:GetResolver',
'appsync:GetSchemaCreationStatus',
'appsync:GetType',
'appsync:GraphQL',
'appsync:ListApiKeys',
'appsync:ListDataSources',
'appsync:ListFunctions',
'appsync:ListGraphqlApis',
'appsync:ListResolvers',
'appsync:ListTypes',
'appsync:StartSchemaCreation',
'appsync:UpdateApiKey',
'appsync:UpdateDataSource',
'appsync:UpdateFunction',
'appsync:UpdateGraphqlApi',
'appsync:UpdateResolver',
'appsync:UpdateType',
'artifact:AcceptAgreement',
'artifact:DownloadAgreement',
'artifact:Get',
'artifact:TerminateAgreement',
'athena:BatchGetNamedQuery',
'athena:BatchGetQueryExecution',
'athena:CancelQueryExecution',
'athena:CreateNamedQuery',
'athena:CreateWorkGroup',
'athena:DeleteNamedQuery',
'athena:DeleteWorkGroup',
'athena:GetCatalogs',
'athena:GetExecutionEngine',
'athena:GetExecutionEngines',
'athena:GetNamedQuery',
'athena:GetNamespace',
'athena:GetNamespaces',
'athena:GetQueryExecution',
'athena:GetQueryExecutions',
'athena:GetQueryResults',
'athena:GetQueryResultsStream',
'athena:GetTable',
'athena:GetTables',
'athena:GetWorkGroup',
'athena:ListNamedQueries',
'athena:ListQueryExecutions',
'athena:ListTagsForResource',
'athena:ListWorkGroups',
'athena:RunQuery',
'athena:StartQueryExecution',
'athena:StopQueryExecution',
'athena:TagResource',
'athena:UntagResource',
'athena:UpdateWorkGroup',
'autoscaling-plans:CreateScalingPlan',
'autoscaling-plans:DeleteScalingPlan',
'autoscaling-plans:DescribeScalingPlanResources',
'autoscaling-plans:DescribeScalingPlans',
'autoscaling-plans:GetScalingPlanResourceForecastData',
'autoscaling-plans:UpdateScalingPlan',
'backup:CreateBackupPlan',
'backup:CreateBackupSelection',
'backup:CreateBackupVault',
'backup:DeleteBackupPlan',
'backup:DeleteBackupSelection',
'backup:DeleteBackupVault',
'backup:DeleteBackupVaultAccessPolicy',
'backup:DeleteBackupVaultNotifications',
'backup:DeleteRecoveryPoint',
'backup:DescribeBackupJob',
'backup:DescribeBackupVault',
'backup:DescribeProtectedResource',
'backup:DescribeRecoveryPoint',
'backup:DescribeRestoreJob',
'backup:ExportBackupPlanTemplate',
'backup:GetBackupPlan',
'backup:GetBackupPlanFromJSON',
'backup:GetBackupPlanFromTemplate',
'backup:GetBackupSelection',
'backup:GetBackupVaultAccessPolicy',
'backup:GetBackupVaultNotifications',
'backup:GetRecoveryPointRestoreMetadata',
'backup:GetSupportedResourceTypes',
'backup:ListBackupJobs',
'backup:ListBackupPlanTemplates',
'backup:ListBackupPlanVersions',
'backup:ListBackupPlans',
'backup:ListBackupSelections',
'backup:ListBackupVaults',
'backup:ListProtectedResources',
'backup:ListRecoveryPointsByBackupVault',
'backup:ListRecoveryPointsByResource',
'backup:ListRestoreJobs',
'backup:ListTags',
'backup:PutBackupVaultAccessPolicy',
'backup:PutBackupVaultNotifications',
'backup:StartBackupJob',
'backup:StartRestoreJob',
'backup:StopBackupJob',
'backup:TagResource',
'backup:UntagResource',
'backup:UpdateBackupPlan',
'backup:UpdateRecoveryPointLifecycle',
'batch:CancelJob',
'batch:CreateComputeEnvironment',
'batch:CreateJobQueue',
'batch:DeleteComputeEnvironment',
'batch:DeleteJobQueue',
'batch:DeregisterJobDefinition',
'batch:DescribeComputeEnvironments',
'batch:DescribeJobDefinitions',
'batch:DescribeJobQueues',
'batch:DescribeJobs',
'batch:ListJobs',
'batch:RegisterJobDefinition',
'batch:SubmitJob',
'batch:TerminateJob',
'batch:UpdateComputeEnvironment',
'batch:UpdateJobQueue',
'aws-portal:ModifyAccount',
'aws-portal:ModifyBilling',
'aws-portal:ModifyPaymentMethods',
'aws-portal:ViewAccount',
'aws-portal:ViewBilling',
'aws-portal:ViewPaymentMethods',
'aws-portal:ViewUsage',
'budgets:ModifyBudget',
'budgets:ViewBudget',
'acm:AddTagsToCertificate',
'acm:DeleteCertificate',
'acm:DescribeCertificate',
'acm:ExportCertificate',
'acm:GetCertificate',
'acm:ImportCertificate',
'acm:ListCertificates',
'acm:ListTagsForCertificate',
'acm:RemoveTagsFromCertificate',
'acm:RenewCertificate',
'acm:RequestCertificate',
'acm:ResendValidationEmail',
'acm:UpdateCertificateOptions',
'acm-pca:CreateCertificateAuthority',
'acm-pca:CreateCertificateAuthorityAuditReport',
'acm-pca:CreatePermission',
'acm-pca:DeleteCertificateAuthority',
'acm-pca:DeletePermission',
'acm-pca:DescribeCertificateAuthority',
'acm-pca:DescribeCertificateAuthorityAuditReport',
'acm-pca:GetCertificate',
'acm-pca:GetCertificateAuthorityCertificate',
'acm-pca:GetCertificateAuthorityCsr',
'acm-pca:ImportCertificateAuthorityCertificate',
'acm-pca:IssueCertificate',
'acm-pca:ListCertificateAuthorities',
'acm-pca:ListPermissions',
'acm-pca:ListTags',
'acm-pca:RestoreCertificateAuthority',
'acm-pca:RevokeCertificate',
'acm-pca:TagCertificateAuthority',
'acm-pca:UntagCertificateAuthority',
'acm-pca:UpdateCertificateAuthority',
'chime:AcceptDelegate',
'chime:ActivateUsers',
'chime:AddDomain',
'chime:AddOrUpdateGroups',
'chime:AssociatePhoneNumberWithUser',
'chime:AssociatePhoneNumbersWithVoiceConnector',
'chime:AuthorizeDirectory',
'chime:BatchDeletePhoneNumber',
'chime:BatchSuspendUser',
'chime:BatchUnsuspendUser',
'chime:BatchUpdatePhoneNumber',
'chime:BatchUpdateUser',
'chime:ConnectDirectory',
'chime:CreateAccount',
'chime:CreateApiKey',
'chime:CreateBot',
'chime:CreateBotMembership',
'chime:CreateCDRBucket',
'chime:CreatePhoneNumberOrder',
'chime:CreateVoiceConnector',
'chime:DeleteAccount',
'chime:DeleteAccountOpenIdConfig',
'chime:DeleteApiKey',
'chime:DeleteCDRBucket',
'chime:DeleteDelegate',
'chime:DeleteDomain',
'chime:DeleteEventsConfiguration',
'chime:DeleteGroups',
'chime:DeletePhoneNumber',
'chime:DeleteVoiceConnector',
'chime:DeleteVoiceConnectorOrigination',
'chime:DeleteVoiceConnectorTermination',
'chime:DeleteVoiceConnectorTerminationCredentials',
'chime:DisassociatePhoneNumberFromUser',
'chime:DisassociatePhoneNumbersFromVoiceConnector',
'chime:DisconnectDirectory',
'chime:GetAccount',
'chime:GetAccountResource',
'chime:GetAccountSettings',
'chime:GetAccountWithOpenIdConfig',
'chime:GetBot',
'chime:GetCDRBucket',
'chime:GetDomain',
'chime:GetEventsConfiguration',
'chime:GetGlobalSettings',
'chime:GetMeetingDetail',
'chime:GetPhoneNumber',
'chime:GetPhoneNumberOrder',
'chime:GetTelephonyLimits',
'chime:GetUser',
'chime:GetUserActivityReportData',
'chime:GetUserByEmail',
'chime:GetUserSettings',
'chime:GetVoiceConnector',
'chime:GetVoiceConnectorOrigination',
'chime:GetVoiceConnectorTermination',
'chime:GetVoiceConnectorTerminationHealth',
'chime:InviteDelegate',
'chime:InviteUsers',
'chime:ListAccountUsageReportData',
'chime:ListAccounts',
'chime:ListApiKeys',
'chime:ListBots',
'chime:ListCDRBucket',
'chime:ListCallingRegions',
'chime:ListDelegates',
'chime:ListDirectories',
'chime:ListDomains',
'chime:ListGroups',
'chime:ListMeetingEvents',
'chime:ListMeetingsReportData',
'chime:ListPhoneNumberOrders',
'chime:ListPhoneNumbers',
'chime:ListUsers',
'chime:ListVoiceConnectorTerminationCredentials',
'chime:ListVoiceConnectors',
'chime:LogoutUser',
'chime:PutEventsConfiguration',
'chime:PutVoiceConnectorOrigination',
'chime:PutVoiceConnectorTermination',
'chime:PutVoiceConnectorTerminationCredentials',
'chime:RegenerateSecurityToken',
'chime:RenameAccount',
'chime:RenewDelegate',
'chime:ResetAccountResource',
'chime:ResetPersonalPIN',
'chime:RestorePhoneNumber',
'chime:RetrieveDataExports',
'chime:SearchAvailablePhoneNumbers',
'chime:StartDataExport',
'chime:SubmitSupportRequest',
'chime:SuspendUsers',
'chime:UnauthorizeDirectory',
'chime:UpdateAccount',
'chime:UpdateAccountOpenIdConfig',
'chime:UpdateAccountResource',
'chime:UpdateAccountSettings',
'chime:UpdateBot',
'chime:UpdateCDRSettings',
'chime:UpdateGlobalSettings',
'chime:UpdatePhoneNumber',
'chime:UpdateSupportedLicenses',
'chime:UpdateUser',
'chime:UpdateUserLicenses',
'chime:UpdateUserSettings',
'chime:UpdateVoiceConnector',
'chime:ValidateAccountResource',
'clouddirectory:AddFacetToObject',
'clouddirectory:ApplySchema',
'clouddirectory:AttachObject',
'clouddirectory:AttachPolicy',
'clouddirectory:AttachToIndex',
'clouddirectory:AttachTypedLink',
'clouddirectory:BatchRead',
'clouddirectory:BatchWrite',
'clouddirectory:CreateDirectory',
'clouddirectory:CreateFacet',
'clouddirectory:CreateIndex',
'clouddirectory:CreateObject',
'clouddirectory:CreateSchema',
'clouddirectory:CreateTypedLinkFacet',
'clouddirectory:DeleteDirectory',
'clouddirectory:DeleteFacet',
'clouddirectory:DeleteObject',
'clouddirectory:DeleteSchema',
'clouddirectory:DeleteTypedLinkFacet',
'clouddirectory:DetachFromIndex',
'clouddirectory:DetachObject',
'clouddirectory:DetachPolicy',
'clouddirectory:DetachTypedLink',
'clouddirectory:DisableDirectory',
'clouddirectory:EnableDirectory',
'clouddirectory:GetDirectory',
'clouddirectory:GetFacet',
'clouddirectory:GetLinkAttributes',
'clouddirectory:GetObjectAttributes',
'clouddirectory:GetObjectInformation',
'clouddirectory:GetSchemaAsJson',
'clouddirectory:GetTypedLinkFacetInformation',
'clouddirectory:ListAppliedSchemaArns',
'clouddirectory:ListAttachedIndices',
'clouddirectory:ListDevelopmentSchemaArns',
'clouddirectory:ListDirectories',
'clouddirectory:ListFacetAttributes',
'clouddirectory:ListFacetNames',
'clouddirectory:ListIncomingTypedLinks',
'clouddirectory:ListIndex',
'clouddirectory:ListObjectAttributes',
'clouddirectory:ListObjectChildren',
'clouddirectory:ListObjectParentPaths',
'clouddirectory:ListObjectParents',
'clouddirectory:ListObjectPolicies',
'clouddirectory:ListOutgoingTypedLinks',
'clouddirectory:ListPolicyAttachments',
'clouddirectory:ListPublishedSchemaArns',
'clouddirectory:ListTagsForResource',
'clouddirectory:ListTypedLinkFacetAttributes',
'clouddirectory:ListTypedLinkFacetNames',
'clouddirectory:LookupPolicy',
'clouddirectory:PublishSchema',
'clouddirectory:PutSchemaFromJson',
'clouddirectory:RemoveFacetFromObject',
'clouddirectory:TagResource',
'clouddirectory:UntagResource',
'clouddirectory:UpdateFacet',
'clouddirectory:UpdateLinkAttributes',
'clouddirectory:UpdateObjectAttributes',
'clouddirectory:UpdateSchema',
'clouddirectory:UpdateTypedLinkFacet',
'servicediscovery:CreateHttpNamespace',
'servicediscovery:CreatePrivateDnsNamespace',
'servicediscovery:CreatePublicDnsNamespace',
'servicediscovery:CreateService',
'servicediscovery:DeleteNamespace',
'servicediscovery:DeleteService',
'servicediscovery:DeregisterInstance',
'servicediscovery:DiscoverInstances',
'servicediscovery:GetInstance',
'servicediscovery:GetInstancesHealthStatus',
'servicediscovery:GetNamespace',
'servicediscovery:GetOperation',
'servicediscovery:GetService',
'servicediscovery:ListInstances',
'servicediscovery:ListNamespaces',
'servicediscovery:ListOperations',
'servicediscovery:ListServices',
'servicediscovery:RegisterInstance',
'servicediscovery:UpdateInstanceCustomHealthStatus',
'servicediscovery:UpdateService',
'cloud9:CreateEnvironmentEC2',
'cloud9:CreateEnvironmentMembership',
'cloud9:CreateEnvironmentSSH',
'cloud9:DeleteEnvironment',
'cloud9:DeleteEnvironmentMembership',
'cloud9:DescribeEnvironmentMemberships',
'cloud9:DescribeEnvironmentStatus',
'cloud9:DescribeEnvironments',
'cloud9:GetUserPublicKey',
'cloud9:ListEnvironments',
'cloud9:UpdateEnvironment',
'cloud9:UpdateEnvironmentMembership',
'cloud9:ValidateEnvironmentName',
'cloudformation:CancelUpdateStack',
'cloudformation:ContinueUpdateRollback',
'cloudformation:CreateChangeSet',
'cloudformation:CreateStack',
'cloudformation:CreateStackInstances',
'cloudformation:CreateStackSet',
'cloudformation:CreateUploadBucket [permission only]',
'cloudformation:DeleteChangeSet',
'cloudformation:DeleteStack',
'cloudformation:DeleteStackInstances',
'cloudformation:DeleteStackSet',
'cloudformation:DescribeAccountLimits',
'cloudformation:DescribeChangeSet',
'cloudformation:DescribeStackDriftDetectionStatus',
'cloudformation:DescribeStackEvents',
'cloudformation:DescribeStackInstance',
'cloudformation:DescribeStackResource',
'cloudformation:DescribeStackResourceDrifts',
'cloudformation:DescribeStackResources',
'cloudformation:DescribeStackSet',
'cloudformation:DescribeStackSetOperation',
'cloudformation:DescribeStacks',
'cloudformation:DetectStackDrift',
'cloudformation:DetectStackResourceDrift',
'cloudformation:EstimateTemplateCost',
'cloudformation:ExecuteChangeSet',
'cloudformation:GetStackPolicy',
'cloudformation:GetTemplate',
'cloudformation:GetTemplateSummary',
'cloudformation:ListChangeSets',
'cloudformation:ListExports',
'cloudformation:ListImports',
'cloudformation:ListStackInstances',
'cloudformation:ListStackResources',
'cloudformation:ListStackSetOperationResults',
'cloudformation:ListStackSetOperations',
'cloudformation:ListStackSets',
'cloudformation:ListStacks',
'cloudformation:SetStackPolicy',
'cloudformation:SignalResource',
'cloudformation:StopStackSetOperation',
'cloudformation:UpdateStack',
'cloudformation:UpdateStackInstances',
'cloudformation:UpdateStackSet',
'cloudformation:UpdateTerminationProtection',
'cloudformation:ValidateTemplate',
'cloudfront:CreateCloudFrontOriginAccessIdentity',
'cloudfront:CreateDistribution',
'cloudfront:CreateDistributionWithTags',
'cloudfront:CreateInvalidation',
'cloudfront:CreateStreamingDistribution',
'cloudfront:CreateStreamingDistributionWithTags',
'cloudfront:DeleteCloudFrontOriginAccessIdentity',
'cloudfront:DeleteDistribution',
'cloudfront:DeleteStreamingDistribution',
'cloudfront:GetCloudFrontOriginAccessIdentity',
'cloudfront:GetCloudFrontOriginAccessIdentityConfig',
'cloudfront:GetDistribution',
'cloudfront:GetDistributionConfig',
'cloudfront:GetInvalidation',
'cloudfront:GetStreamingDistribution',
'cloudfront:GetStreamingDistributionConfig',
'cloudfront:ListCloudFrontOriginAccessIdentities',
'cloudfront:ListDistributions',
'cloudfront:ListDistributionsByWebACLId',
'cloudfront:ListInvalidations',
'cloudfront:ListStreamingDistributions',
'cloudfront:ListTagsForResource',
'cloudfront:TagResource',
'cloudfront:UntagResource',
'cloudfront:UpdateCloudFrontOriginAccessIdentity',
'cloudfront:UpdateDistribution',
'cloudfront:UpdateStreamingDistribution',
'cloudhsm:AddTagsToResource',
'cloudhsm:CreateCluster',
'cloudhsm:CreateHapg',
'cloudhsm:CreateHsm',
'cloudhsm:CreateLunaClient',
'cloudhsm:DeleteCluster',
'cloudhsm:DeleteHapg',
'cloudhsm:DeleteHsm',
'cloudhsm:DeleteLunaClient',
'cloudhsm:DescribeBackups',
'cloudhsm:DescribeClusters',
'cloudhsm:DescribeHapg',
'cloudhsm:DescribeHsm',
'cloudhsm:DescribeLunaClient',
'cloudhsm:GetConfig',
'cloudhsm:InitializeCluster',
'cloudhsm:ListAvailableZones',
'cloudhsm:ListHapgs',
'cloudhsm:ListHsms',
'cloudhsm:ListLunaClients',
'cloudhsm:ListTags',
'cloudhsm:ListTagsForResource',
'cloudhsm:ModifyHapg',
'cloudhsm:ModifyHsm',
'cloudhsm:ModifyLunaClient',
'cloudhsm:RemoveTagsFromResource',
'cloudhsm:TagResource',
'cloudhsm:UntagResource',
'cloudsearch:AddTags',
'cloudsearch:BuildSuggesters',
'cloudsearch:CreateDomain',
'cloudsearch:DefineAnalysisScheme',
'cloudsearch:DefineExpression',
'cloudsearch:DefineIndexField',
'cloudsearch:DefineSuggester',
'cloudsearch:DeleteAnalysisScheme',
'cloudsearch:DeleteDomain',
'cloudsearch:DeleteExpression',
'cloudsearch:DeleteIndexField',
'cloudsearch:DeleteSuggester',
'cloudsearch:DescribeAnalysisSchemes',
'cloudsearch:DescribeAvailabilityOptions',
'cloudsearch:DescribeDomains',
'cloudsearch:DescribeExpressions',
'cloudsearch:DescribeIndexFields',
'cloudsearch:DescribeScalingParameters',
'cloudsearch:DescribeServiceAccessPolicies',
'cloudsearch:DescribeSuggesters',
'cloudsearch:IndexDocuments',
'cloudsearch:ListDomainNames',
'cloudsearch:ListTags',
'cloudsearch:RemoveTags',
'cloudsearch:UpdateAvailabilityOptions',
'cloudsearch:UpdateScalingParameters',
'cloudsearch:UpdateServiceAccessPolicies',
'cloudsearch:document[permission only]',
'cloudsearch:search[permission only]',
'cloudsearch:suggest[permission only]',
'cloudtrail:AddTags',
'cloudtrail:CreateTrail',
'cloudtrail:DeleteTrail',
'cloudtrail:DescribeTrails',
'cloudtrail:GetEventSelectors',
'cloudtrail:GetTrailStatus',
'cloudtrail:ListPublicKeys',
'cloudtrail:ListTags',
'cloudtrail:LookupEvents',
'cloudtrail:PutEventSelectors',
'cloudtrail:RemoveTags',
'cloudtrail:StartLogging',
'cloudtrail:StopLogging',
'cloudtrail:UpdateTrail',
'cloudwatch:DeleteAlarms',
'cloudwatch:DeleteDashboards',
'cloudwatch:DescribeAlarmHistory',
'cloudwatch:DescribeAlarms',
'cloudwatch:DescribeAlarmsForMetric',
'cloudwatch:DisableAlarmActions',
'cloudwatch:EnableAlarmActions',
'cloudwatch:GetDashboard',
'cloudwatch:GetMetricData',
'cloudwatch:GetMetricStatistics',
'cloudwatch:GetMetricWidgetImage',
'cloudwatch:ListDashboards',
'cloudwatch:ListMetrics',
'cloudwatch:ListTagsForResource',
'cloudwatch:PutDashboard',
'cloudwatch:PutMetricAlarm',
'cloudwatch:PutMetricData',
'cloudwatch:SetAlarmState',
'cloudwatch:TagResource',
'cloudwatch:UntagResource',
'applicationinsights:CreateApplication',
'applicationinsights:CreateComponent',
'applicationinsights:DeleteApplication',
'applicationinsights:DeleteComponent',
'applicationinsights:DescribeApplication',
'applicationinsights:DescribeComponent',
'applicationinsights:DescribeComponentConfiguration',
'applicationinsights:DescribeComponentConfigurationRecommendation',
'applicationinsights:DescribeObservation',
'applicationinsights:DescribeProblem',
'applicationinsights:DescribeProblemDashboard',
'applicationinsights:DescribeProblemObservations',
'applicationinsights:ListApplications',
'applicationinsights:ListComponents',
'applicationinsights:ListProblems',
'applicationinsights:UpdateApplication',
'applicationinsights:UpdateComponent',
'applicationinsights:UpdateComponentConfiguration',
'applicationinsights:UpdateProblem',
'events:DeleteRule',
'events:DescribeEventBus',
'events:DescribeRule',
'events:DisableRule',
'events:EnableRule',
'events:ListRuleNamesByTarget',
'events:ListRules',
'events:ListTagsForResource',
'events:ListTargetsByRule',
'events:PutEvents',
'events:PutPermission',
'events:PutRule',
'events:PutTargets',
'events:RemovePermission',
'events:RemoveTargets',
'events:TagResource',
'events:TestEventPattern',
'events:UntagResource',
'logs:AssociateKmsKey',
'logs:CancelExportTask',
'logs:CreateExportTask',
'logs:CreateLogDelivery [permission only]',
'logs:CreateLogGroup',
'logs:CreateLogStream',
'logs:DeleteDestination',
'logs:DeleteLogDelivery [permission only]',
'logs:DeleteLogGroup',
'logs:DeleteLogStream',
'logs:DeleteMetricFilter',
'logs:DeleteResourcePolicy',
'logs:DeleteRetentionPolicy',
'logs:DeleteSubscriptionFilter',
'logs:DescribeDestinations',
'logs:DescribeExportTasks',
'logs:DescribeLogGroups',
'logs:DescribeLogStreams',
'logs:DescribeMetricFilters',
'logs:DescribeQueries',
'logs:DescribeResourcePolicies',
'logs:DescribeSubscriptionFilters',
'logs:DisassociateKmsKey',
'logs:FilterLogEvents',
'logs:GetLogDelivery [permission only]',
'logs:GetLogEvents',
'logs:GetLogGroupFields',
'logs:GetLogRecord',
'logs:GetQueryResults',
'logs:ListLogDeliveries [permission only]',
'logs:ListTagsLogGroup',
'logs:PutDestination',
'logs:PutDestinationPolicy',
'logs:PutLogEvents',
'logs:PutMetricFilter',
'logs:PutResourcePolicy',
'logs:PutRetentionPolicy',
'logs:PutSubscriptionFilter',
'logs:StartQuery',
'logs:StopQuery',
'logs:TagLogGroup',
'logs:TestMetricFilter',
'logs:UntagLogGroup',
'logs:UpdateLogDelivery [permission only]',
'signer:CancelSigningProfile',
'signer:DescribeSigningJob',
'signer:GetSigningPlatform',
'signer:GetSigningProfile',
'signer:ListSigningJobs',
'signer:ListSigningPlatforms',
'signer:ListSigningProfiles',
'signer:PutSigningProfile',
'signer:StartSigningJob',
'codebuild:BatchDeleteBuilds',
'codebuild:BatchGetBuilds',
'codebuild:BatchGetProjects',
'codebuild:CreateProject',
'codebuild:CreateWebhook',
'codebuild:DeleteOAuthToken[permission only]',
'codebuild:DeleteProject',
'codebuild:DeleteSourceCredentials',
'codebuild:DeleteWebhook',
'codebuild:ImportSourceCredentials',
'codebuild:InvalidateProjectCache',
'codebuild:ListBuilds',
'codebuild:ListBuildsForProject',
'codebuild:ListConnectedOAuthAccounts[permission only]',
'codebuild:ListCuratedEnvironmentImages',
'codebuild:ListProjects',
'codebuild:ListRepositories[permission only]',
'codebuild:ListSourceCredentials',
'codebuild:PersistOAuthToken[permission only]',
'codebuild:StartBuild',
'codebuild:StopBuild',
'codebuild:UpdateProject',
'codebuild:UpdateWebhook',
'codecommit:BatchDescribeMergeConflicts',
'codecommit:BatchGetPullRequests[permission only]',
'codecommit:BatchGetRepositories',
'codecommit:CancelUploadArchive[permission only]',
'codecommit:CreateBranch',
'codecommit:CreateCommit',
'codecommit:CreatePullRequest',
'codecommit:CreateRepository',
'codecommit:CreateUnreferencedMergeCommit',
'codecommit:DeleteBranch',
'codecommit:DeleteCommentContent',
'codecommit:DeleteFile',
'codecommit:DeleteRepository',
'codecommit:DescribeMergeConflicts',
'codecommit:DescribePullRequestEvents',
'codecommit:GetBlob',
'codecommit:GetBranch',
'codecommit:GetComment',
'codecommit:GetCommentsForComparedCommit',
'codecommit:GetCommentsForPullRequest',
'codecommit:GetCommit',
'codecommit:GetCommitHistory[permission only]',
'codecommit:GetCommitsFromMergeBase[permission only]',
'codecommit:GetDifferences',
'codecommit:GetFile',
'codecommit:GetFolder',
'codecommit:GetMergeCommit',
'codecommit:GetMergeConflicts',
'codecommit:GetMergeOptions',
'codecommit:GetObjectIdentifier[permission only]',
'codecommit:GetPullRequest',
'codecommit:GetReferences[permission only]',
'codecommit:GetRepository',
'codecommit:GetRepositoryTriggers',
'codecommit:GetTree[permission only]',
'codecommit:GetUploadArchiveStatus[permission only]',
'codecommit:GitPull[permission only]',
'codecommit:GitPush[permission only]',
'codecommit:ListBranches',
'codecommit:ListPullRequests',
'codecommit:ListRepositories',
'codecommit:ListTagsForResource',
'codecommit:MergeBranchesByFastForward',
'codecommit:MergeBranchesBySquash',
'codecommit:MergeBranchesByThreeWay',
'codecommit:MergePullRequestByFastForward',
'codecommit:MergePullRequestBySquash',
'codecommit:MergePullRequestByThreeWay',
'codecommit:PostCommentForComparedCommit',
'codecommit:PostCommentForPullRequest',
'codecommit:PostCommentReply',
'codecommit:PutFile',
'codecommit:PutRepositoryTriggers',
'codecommit:TagResource',
'codecommit:TestRepositoryTriggers',
'codecommit:UntagResource',
'codecommit:UpdateComment',
'codecommit:UpdateDefaultBranch',
'codecommit:UpdatePullRequestDescription',
'codecommit:UpdatePullRequestStatus',
'codecommit:UpdatePullRequestTitle',
'codecommit:UpdateRepositoryDescription',
'codecommit:UpdateRepositoryName',
'codecommit:UploadArchive[permission only]',
'codedeploy:AddTagsToOnPremisesInstances',
'codedeploy:BatchGetApplicationRevisions',
'codedeploy:BatchGetApplications',
'codedeploy:BatchGetDeploymentGroups',
'codedeploy:BatchGetDeploymentInstances',
'codedeploy:BatchGetDeployments',
'codedeploy:BatchGetOnPremisesInstances',
'codedeploy:ContinueDeployment',
'codedeploy:CreateApplication',
'codedeploy:CreateDeployment',
'codedeploy:CreateDeploymentConfig',
'codedeploy:CreateDeploymentGroup',
'codedeploy:DeleteApplication',
'codedeploy:DeleteDeploymentConfig',
'codedeploy:DeleteDeploymentGroup',
'codedeploy:DeregisterOnPremisesInstance',
'codedeploy:GetApplication',
'codedeploy:GetApplicationRevision',
'codedeploy:GetDeployment',
'codedeploy:GetDeploymentConfig',
'codedeploy:GetDeploymentGroup',
'codedeploy:GetDeploymentInstance',
'codedeploy:GetOnPremisesInstance',
'codedeploy:ListApplicationRevisions',
'codedeploy:ListApplications',
'codedeploy:ListDeploymentConfigs',
'codedeploy:ListDeploymentGroups',
'codedeploy:ListDeploymentInstances',
'codedeploy:ListDeployments',
'codedeploy:ListOnPremisesInstances',
'codedeploy:PutLifecycleEventHookExecutionStatus',
'codedeploy:RegisterApplicationRevision',
'codedeploy:RegisterOnPremisesInstance',
'codedeploy:RemoveTagsFromOnPremisesInstances',
'codedeploy:StopDeployment',
'codedeploy:UpdateApplication',
'codedeploy:UpdateDeploymentGroup',
'codepipeline:AcknowledgeJob',
'codepipeline:AcknowledgeThirdPartyJob',
'codepipeline:CreateCustomActionType',
'codepipeline:CreatePipeline',
'codepipeline:DeleteCustomActionType',
'codepipeline:DeletePipeline',
'codepipeline:DeleteWebhook',
'codepipeline:DeregisterWebhookWithThirdParty',
'codepipeline:DisableStageTransition',
'codepipeline:EnableStageTransition',
'codepipeline:GetJobDetails',
'codepipeline:GetPipeline',
'codepipeline:GetPipelineExecution',
'codepipeline:GetPipelineState',
'codepipeline:GetThirdPartyJobDetails',
'codepipeline:ListActionExecutions',
'codepipeline:ListActionTypes',
'codepipeline:ListPipelineExecutions',
'codepipeline:ListPipelines',
'codepipeline:ListTagsForResource',
'codepipeline:ListWebhooks',
'codepipeline:PollForJobs',
'codepipeline:PollForThirdPartyJobs',
'codepipeline:PutActionRevision',
'codepipeline:PutApprovalResult',
'codepipeline:PutJobFailureResult',
'codepipeline:PutJobSuccessResult',
'codepipeline:PutThirdPartyJobFailureResult',
'codepipeline:PutThirdPartyJobSuccessResult',
'codepipeline:PutWebhook',
'codepipeline:RegisterWebhookWithThirdParty',
'codepipeline:RetryStageExecution',
'codepipeline:StartPipelineExecution',
'codepipeline:TagResource',
'codepipeline:UntagResource',
'codepipeline:UpdatePipeline',
'codestar:AssociateTeamMember',
'codestar:CreateProject',
'codestar:CreateUserProfile',
'codestar:DeleteExtendedAccess [permission only]',
'codestar:DeleteProject',
'codestar:DeleteUserProfile',
'codestar:DescribeProject',
'codestar:DescribeUserProfile',
'codestar:DisassociateTeamMember',
'codestar:GetExtendedAccess [permission only]',
'codestar:ListProjects',
'codestar:ListResources',
'codestar:ListTeamMembers',
'codestar:ListUserProfiles',
'codestar:PutExtendedAccess [permission only]',
'codestar:UpdateProject',
'codestar:UpdateTeamMember',
'codestar:UpdateUserProfile',
'codestar:VerifyServiceRole',
'cognito-identity:CreateIdentityPool',
'cognito-identity:DeleteIdentities',
'cognito-identity:DeleteIdentityPool',
'cognito-identity:DescribeIdentity',
'cognito-identity:DescribeIdentityPool',
'cognito-identity:GetCredentialsForIdentity',
'cognito-identity:GetId',
'cognito-identity:GetIdentityPoolRoles',
'cognito-identity:GetOpenIdToken',
'cognito-identity:GetOpenIdTokenForDeveloperIdentity',
'cognito-identity:ListIdentities',
'cognito-identity:ListIdentityPools',
'cognito-identity:ListTagsForResource',
'cognito-identity:LookupDeveloperIdentity',
'cognito-identity:MergeDeveloperIdentities',
'cognito-identity:SetIdentityPoolRoles',
'cognito-identity:TagResource',
'cognito-identity:UnlinkDeveloperIdentity',
'cognito-identity:UnlinkIdentity',
'cognito-identity:UntagResource',
'cognito-identity:UpdateIdentityPool',
'cognito-sync:BulkPublish',
'cognito-sync:DeleteDataset',
'cognito-sync:DescribeDataset',
'cognito-sync:DescribeIdentityPoolUsage',
'cognito-sync:DescribeIdentityUsage',
'cognito-sync:GetBulkPublishDetails',
'cognito-sync:GetCognitoEvents',
'cognito-sync:GetIdentityPoolConfiguration',
'cognito-sync:ListDatasets',
'cognito-sync:ListIdentityPoolUsage',
'cognito-sync:ListRecords',
'cognito-sync:QueryRecords [permission only]',
'cognito-sync:RegisterDevice',
'cognito-sync:SetCognitoEvents',
'cognito-sync:SetDatasetConfiguration [permission only]',
'cognito-sync:SetIdentityPoolConfiguration',
'cognito-sync:SubscribeToDataset',
'cognito-sync:UnsubscribeFromDataset',
'cognito-sync:UpdateRecords',
'cognito-idp:AddCustomAttributes',
'cognito-idp:AdminAddUserToGroup',
'cognito-idp:AdminConfirmSignUp',
'cognito-idp:AdminCreateUser',
'cognito-idp:AdminDeleteUser',
'cognito-idp:AdminDeleteUserAttributes',
'cognito-idp:AdminDisableProviderForUser',
'cognito-idp:AdminDisableUser',
'cognito-idp:AdminEnableUser',
'cognito-idp:AdminForgetDevice',
'cognito-idp:AdminGetDevice',
'cognito-idp:AdminGetUser',
'cognito-idp:AdminInitiateAuth',
'cognito-idp:AdminLinkProviderForUser',
'cognito-idp:AdminListDevices',
'cognito-idp:AdminListGroupsForUser',
'cognito-idp:AdminListUserAuthEvents',
'cognito-idp:AdminRemoveUserFromGroup',
'cognito-idp:AdminResetUserPassword',
'cognito-idp:AdminRespondToAuthChallenge',
'cognito-idp:AdminSetUserMFAPreference',
'cognito-idp:AdminSetUserPassword',
'cognito-idp:AdminSetUserSettings',
'cognito-idp:AdminUpdateAuthEventFeedback',
'cognito-idp:AdminUpdateDeviceStatus',
'cognito-idp:AdminUpdateUserAttributes',
'cognito-idp:AdminUserGlobalSignOut',
'cognito-idp:AssociateSoftwareToken',
'cognito-idp:ChangePassword',
'cognito-idp:ConfirmDevice',
'cognito-idp:ConfirmForgotPassword',
'cognito-idp:ConfirmSignUp',
'cognito-idp:CreateGroup',
'cognito-idp:CreateIdentityProvider',
'cognito-idp:CreateResourceServer',
'cognito-idp:CreateUserImportJob',
'cognito-idp:CreateUserPool',
'cognito-idp:CreateUserPoolClient',
'cognito-idp:CreateUserPoolDomain',
'cognito-idp:DeleteGroup',
'cognito-idp:DeleteIdentityProvider',
'cognito-idp:DeleteResourceServer',
'cognito-idp:DeleteUser',
'cognito-idp:DeleteUserAttributes',
'cognito-idp:DeleteUserPool',
'cognito-idp:DeleteUserPoolClient',
'cognito-idp:DeleteUserPoolDomain',
'cognito-idp:DescribeIdentityProvider',
'cognito-idp:DescribeResourceServer',
'cognito-idp:DescribeRiskConfiguration',
'cognito-idp:DescribeUserImportJob',
'cognito-idp:DescribeUserPool',
'cognito-idp:DescribeUserPoolClient',
'cognito-idp:DescribeUserPoolDomain',
'cognito-idp:ForgetDevice',
'cognito-idp:ForgotPassword',
'cognito-idp:GetCSVHeader',
'cognito-idp:GetDevice',
'cognito-idp:GetGroup',
'cognito-idp:GetIdentityProviderByIdentifier',
'cognito-idp:GetSigningCertificate',
'cognito-idp:GetUICustomization',
'cognito-idp:GetUser',
'cognito-idp:GetUserAttributeVerificationCode',
'cognito-idp:GetUserPoolMfaConfig',
'cognito-idp:GlobalSignOut',
'cognito-idp:InitiateAuth',
'cognito-idp:ListDevices',
'cognito-idp:ListGroups',
'cognito-idp:ListIdentityProviders',
'cognito-idp:ListResourceServers',
'cognito-idp:ListTagsForResource',
'cognito-idp:ListUserImportJobs',
'cognito-idp:ListUserPoolClients',
'cognito-idp:ListUserPools',
'cognito-idp:ListUsers',
'cognito-idp:ListUsersInGroup',
'cognito-idp:ResendConfirmationCode',
'cognito-idp:RespondToAuthChallenge',
'cognito-idp:SetRiskConfiguration',
'cognito-idp:SetUICustomization',
'cognito-idp:SetUserMFAPreference',
'cognito-idp:SetUserPoolMfaConfig',
'cognito-idp:SetUserSettings',
'cognito-idp:SignUp',
'cognito-idp:StartUserImportJob',
'cognito-idp:StopUserImportJob',
'cognito-idp:TagResource',
'cognito-idp:UntagResource',
'cognito-idp:UpdateAuthEventFeedback',
'cognito-idp:UpdateDeviceStatus',
'cognito-idp:UpdateGroup',
'cognito-idp:UpdateIdentityProvider',
'cognito-idp:UpdateResourceServer',
'cognito-idp:UpdateUserAttributes',
'cognito-idp:UpdateUserPool',
'cognito-idp:UpdateUserPoolClient',
'cognito-idp:UpdateUserPoolDomain',
'cognito-idp:VerifySoftwareToken',
'cognito-idp:VerifyUserAttribute',
'comprehend:BatchDetectDominantLanguage',
'comprehend:BatchDetectEntities',
'comprehend:BatchDetectKeyPhrases',
'comprehend:BatchDetectSentiment',
'comprehend:BatchDetectSyntax',
'comprehend:CreateDocumentClassifier',
'comprehend:CreateEntityRecognizer',
'comprehend:DeleteDocumentClassifier',
'comprehend:DeleteEntityRecognizer',
'comprehend:DescribeDocumentClassificationJob',
'comprehend:DescribeDocumentClassifier',
'comprehend:DescribeDominantLanguageDetectionJob',
'comprehend:DescribeEntitiesDetectionJob',
'comprehend:DescribeEntityRecognizer',
'comprehend:DescribeKeyPhrasesDetectionJob',
'comprehend:DescribeSentimentDetectionJob',
'comprehend:DescribeTopicsDetectionJob',
'comprehend:DetectDominantLanguage',
'comprehend:DetectEntities',
'comprehend:DetectKeyPhrases',
'comprehend:DetectSentiment',
'comprehend:DetectSyntax',
'comprehend:ListDocumentClassificationJobs',
'comprehend:ListDocumentClassifiers',
'comprehend:ListDominantLanguageDetectionJobs',
'comprehend:ListEntitiesDetectionJobs',
'comprehend:ListEntityRecognizers',
'comprehend:ListKeyPhrasesDetectionJobs',
'comprehend:ListSentimentDetectionJobs',
'comprehend:ListTagsForResource',
'comprehend:ListTopicsDetectionJobs',
'comprehend:StartDocumentClassificationJob',
'comprehend:StartDominantLanguageDetectionJob',
'comprehend:StartEntitiesDetectionJob',
'comprehend:StartKeyPhrasesDetectionJob',
'comprehend:StartSentimentDetectionJob',
'comprehend:StartTopicsDetectionJob',
'comprehend:StopDominantLanguageDetectionJob',
'comprehend:StopEntitiesDetectionJob',
'comprehend:StopKeyPhrasesDetectionJob',
'comprehend:StopSentimentDetectionJob',
'comprehend:StopTrainingDocumentClassifier',
'comprehend:StopTrainingEntityRecognizer',
'comprehend:TagResource',
'comprehend:UntagResource',
'comprehendmedical:DetectEntities',
'comprehendmedical:DetectPHI',
'config:BatchGetAggregateResourceConfig',
'config:BatchGetResourceConfig',
'config:DeleteAggregationAuthorization',
'config:DeleteConfigRule',
'config:DeleteConfigurationAggregator',
'config:DeleteConfigurationRecorder',
'config:DeleteDeliveryChannel',
'config:DeleteEvaluationResults',
'config:DeletePendingAggregationRequest',
'config:DeleteRemediationConfiguration',
'config:DeleteRetentionConfiguration',
'config:DeliverConfigSnapshot',
'config:DescribeAggregateComplianceByConfigRules',
'config:DescribeAggregationAuthorizations',
'config:DescribeComplianceByConfigRule',
'config:DescribeComplianceByResource',
'config:DescribeConfigRuleEvaluationStatus',
'config:DescribeConfigRules',
'config:DescribeConfigurationAggregatorSourcesStatus',
'config:DescribeConfigurationAggregators',
'config:DescribeConfigurationRecorderStatus',
'config:DescribeConfigurationRecorders',
'config:DescribeDeliveryChannelStatus',
'config:DescribeDeliveryChannels',
'config:DescribePendingAggregationRequests',
'config:DescribeRemediationConfigurations',
'config:DescribeRemediationExecutionStatus',
'config:DescribeRetentionConfigurations',
'config:GetAggregateComplianceDetailsByConfigRule',
'config:GetAggregateConfigRuleComplianceSummary',
'config:GetAggregateDiscoveredResourceCounts',
'config:GetAggregateResourceConfig',
'config:GetComplianceDetailsByConfigRule',
'config:GetComplianceDetailsByResource',
'config:GetComplianceSummaryByConfigRule',
'config:GetComplianceSummaryByResourceType',
'config:GetDiscoveredResourceCounts',
'config:GetResourceConfigHistory',
'config:ListAggregateDiscoveredResources',
'config:ListDiscoveredResources',
'config:ListTagsForResource',
'config:PutAggregationAuthorization',
'config:PutConfigRule',
'config:PutConfigurationAggregator',
'config:PutConfigurationRecorder',
'config:PutDeliveryChannel',
'config:PutEvaluations',
'config:PutRemediationConfigurations',
'config:PutRetentionConfiguration',
'config:SelectResourceConfig',
'config:StartConfigRulesEvaluation',
'config:StartConfigurationRecorder',
'config:StartRemediationExecution',
'config:StopConfigurationRecorder',
'config:TagResource',
'config:UntagResource',
'connect:CreateInstance',
'connect:DescribeInstance',
'connect:DestroyInstance',
'connect:GetCurrentMetricData',
'connect:GetFederationToken',
'connect:GetFederationTokens',
'connect:GetMetricData',
'connect:ListInstances',
'connect:ModifyInstance',
'connect:StartOutboundVoiceContact',
'connect:StopContact',
'cur:DeleteReportDefinition',
'cur:DescribeReportDefinitions',
'cur:PutReportDefinition',
'ce:GetCostAndUsage',
'ce:GetCostForecast',
'ce:GetDimensionValues',
'ce:GetReservationCoverage',
'ce:GetReservationPurchaseRecommendation',
'ce:GetReservationUtilization',
'ce:GetTags',
'dlm:CreateLifecyclePolicy',
'dlm:DeleteLifecyclePolicy',
'dlm:GetLifecyclePolicies',
'dlm:GetLifecyclePolicy',
'dlm:UpdateLifecyclePolicy',
'datapipeline:ActivatePipeline',
'datapipeline:AddTags',
'datapipeline:CreatePipeline',
'datapipeline:DeactivatePipeline',
'datapipeline:DeletePipeline',
'datapipeline:DescribeObjects',
'datapipeline:DescribePipelines',
'datapipeline:EvaluateExpression',
'datapipeline:GetAccountLimits',
'datapipeline:GetPipelineDefinition',
'datapipeline:ListPipelines',
'datapipeline:PollForTask',
'datapipeline:PutAccountLimits',
'datapipeline:PutPipelineDefinition',
'datapipeline:QueryObjects',
'datapipeline:RemoveTags',
'datapipeline:ReportTaskProgress',
'datapipeline:ReportTaskRunnerHeartbeat',
'datapipeline:SetStatus',
'datapipeline:SetTaskStatus',
'datapipeline:ValidatePipelineDefinition',
'dms:AddTagsToResource',
'dms:ApplyPendingMaintenanceAction',
'dms:CreateEndpoint',
'dms:CreateEventSubscription',
'dms:CreateReplicationInstance',
'dms:CreateReplicationSubnetGroup',
'dms:CreateReplicationTask',
'dms:DeleteCertificate',
'dms:DeleteEndpoint',
'dms:DeleteEventSubscription',
'dms:DeleteReplicationInstance',
'dms:DeleteReplicationSubnetGroup',
'dms:DeleteReplicationTask',
'dms:DescribeAccountAttributes',
'dms:DescribeCertificates',
'dms:DescribeConnections',
'dms:DescribeEndpointTypes',
'dms:DescribeEndpoints',
'dms:DescribeEventCategories',
'dms:DescribeEventSubscriptions',
'dms:DescribeEvents',
'dms:DescribeOrderableReplicationInstances',
'dms:DescribeRefreshSchemasStatus',
'dms:DescribeReplicationInstanceTaskLogs',
'dms:DescribeReplicationInstances',
'dms:DescribeReplicationSubnetGroups',
'dms:DescribeReplicationTaskAssessmentResults',
'dms:DescribeReplicationTasks',
'dms:DescribeSchemas',
'dms:DescribeTableStatistics',
'dms:ImportCertificate',
'dms:ListTagsForResource',
'dms:ModifyEndpoint',
'dms:ModifyEventSubscription',
'dms:ModifyReplicationInstance',
'dms:ModifyReplicationSubnetGroup',
'dms:ModifyReplicationTask',
'dms:RebootReplicationInstance',
'dms:RefreshSchemas',
'dms:ReloadTables',
'dms:RemoveTagsFromResource',
'dms:StartReplicationTask',
'dms:StartReplicationTaskAssessment',
'dms:StopReplicationTask',
'dms:TestConnection',
'datasync:CancelTaskExecution',
'datasync:CreateAgent',
'datasync:CreateLocationEfs',
'datasync:CreateLocationNfs',
'datasync:CreateLocationS3',
'datasync:CreateTask',
'datasync:DeleteAgent',
'datasync:DeleteLocation',
'datasync:DeleteTask',
'datasync:DescribeAgent',
'datasync:DescribeLocationEfs',
'datasync:DescribeLocationNfs',
'datasync:DescribeLocationS3',
'datasync:DescribeTask',
'datasync:DescribeTaskExecution',
'datasync:ListAgents',
'datasync:ListLocations',
'datasync:ListTagsForResource',
'datasync:ListTaskExecutions',
'datasync:ListTasks',
'datasync:StartTaskExecution',
'datasync:TagResource',
'datasync:UntagResource',
'datasync:UpdateAgent',
'datasync:UpdateTask',
'deeplens:AssociateServiceRoleToAccount',
'deeplens:BatchGetDevice',
'deeplens:BatchGetModel',
'deeplens:BatchGetProject',
'deeplens:CreateDeviceCertificates',
'deeplens:CreateModel',
'deeplens:CreateProject',
'deeplens:DeleteModel',
'deeplens:DeleteProject',
'deeplens:DeployProject',
'deeplens:DeregisterDevice',
'deeplens:GetAssociatedResources',
'deeplens:GetDeploymentStatus',
'deeplens:GetDevice',
'deeplens:GetModel',
'deeplens:GetProject',
'deeplens:ImportProjectFromTemplate',
'deeplens:ListDeployments',
'deeplens:ListDevices',
'deeplens:ListModels',
'deeplens:ListProjects',
'deeplens:RegisterDevice',
'deeplens:RemoveProject',
'deeplens:UpdateProject',
'devicefarm:CreateDevicePool',
'devicefarm:CreateProject',
'devicefarm:CreateRemoteAccessSession',
'devicefarm:CreateUpload',
'devicefarm:DeleteDevicePool',
'devicefarm:DeleteProject',
'devicefarm:DeleteRemoteAccessSession',
'devicefarm:DeleteRun',
'devicefarm:DeleteUpload',
'devicefarm:GetAccountSettings',
'devicefarm:GetDevice',
'devicefarm:GetDevicePool',
'devicefarm:GetDevicePoolCompatibility',
'devicefarm:GetJob',
'devicefarm:GetOfferingStatus',
'devicefarm:GetProject',
'devicefarm:GetRemoteAccessSession',
'devicefarm:GetRun',
'devicefarm:GetSuite',
'devicefarm:GetTest',
'devicefarm:GetUpload',
'devicefarm:InstallToRemoteAccessSession',
'devicefarm:ListArtifacts',
'devicefarm:ListDevicePools',
'devicefarm:ListDevices',
'devicefarm:ListJobs',
'devicefarm:ListOfferingTransactions',
'devicefarm:ListOfferings',
'devicefarm:ListProjects',
'devicefarm:ListRemoteAccessSessions',
'devicefarm:ListRuns',
'devicefarm:ListSamples',
'devicefarm:ListSuites',
'devicefarm:ListTests',
'devicefarm:ListUniqueProblems',
'devicefarm:ListUploads',
'devicefarm:PurchaseOffering',
'devicefarm:RenewOffering',
'devicefarm:ScheduleRun',
'devicefarm:StopRemoteAccessSession',
'devicefarm:StopRun',
'devicefarm:UpdateDevicePool',
'devicefarm:UpdateProject',
'directconnect:AcceptDirectConnectGatewayAssociationProposal',
'directconnect:AllocateConnectionOnInterconnect',
'directconnect:AllocateHostedConnection',
'directconnect:AllocatePrivateVirtualInterface',
'directconnect:AllocatePublicVirtualInterface',
'directconnect:AllocateTransitVirtualInterface',
'directconnect:AssociateConnectionWithLag',
'directconnect:AssociateHostedConnection',
'directconnect:AssociateVirtualInterface',
'directconnect:ConfirmConnection',
'directconnect:ConfirmPrivateVirtualInterface',
'directconnect:ConfirmPublicVirtualInterface',
'directconnect:ConfirmTransitVirtualInterface',
'directconnect:CreateBGPPeer',
'directconnect:CreateConnection',
'directconnect:CreateDirectConnectGateway',
'directconnect:CreateDirectConnectGatewayAssociation',
'directconnect:CreateDirectConnectGatewayAssociationProposal',
'directconnect:CreateInterconnect',
'directconnect:CreateLag',
'directconnect:CreatePrivateVirtualInterface',
'directconnect:CreatePublicVirtualInterface',
'directconnect:CreateTransitVirtualInterface',
'directconnect:DeleteBGPPeer',
'directconnect:DeleteConnection',
'directconnect:DeleteDirectConnectGateway',
'directconnect:DeleteDirectConnectGatewayAssociation',
'directconnect:DeleteDirectConnectGatewayAssociationProposal',
'directconnect:DeleteInterconnect',
'directconnect:DeleteLag',
'directconnect:DeleteVirtualInterface',
'directconnect:DescribeConnectionLoa',
'directconnect:DescribeConnections',
'directconnect:DescribeConnectionsOnInterconnect',
'directconnect:DescribeDirectConnectGatewayAssociationProposals',
'directconnect:DescribeDirectConnectGatewayAssociations',
'directconnect:DescribeDirectConnectGatewayAttachments',
'directconnect:DescribeDirectConnectGateways',
'directconnect:DescribeHostedConnections',
'directconnect:DescribeInterconnectLoa',
'directconnect:DescribeInterconnects',
'directconnect:DescribeLags',
'directconnect:DescribeLoa',
'directconnect:DescribeLocations',
'directconnect:DescribeTags',
'directconnect:DescribeVirtualGateways',
'directconnect:DescribeVirtualInterfaces',
'directconnect:DisassociateConnectionFromLag',
'directconnect:TagResource',
'directconnect:UntagResource',
'directconnect:UpdateDirectConnectGatewayAssociation',
'directconnect:UpdateLag',
'directconnect:UpdateVirtualInterfaceAttributes',
'ds:AcceptSharedDirectory',
'ds:AddIpRoutes',
'ds:AddTagsToResource',
'ds:CancelSchemaExtension',
'ds:ConnectDirectory',
'ds:CreateAlias',
'ds:CreateComputer',
'ds:CreateConditionalForwarder',
'ds:CreateDirectory',
'ds:CreateIdentityPoolDirectory [permission only]',
'ds:CreateLogSubscription',
'ds:CreateMicrosoftAD',
'ds:CreateSnapshot',
'ds:CreateTrust',
'ds:DeleteConditionalForwarder',
'ds:DeleteDirectory',
'ds:DeleteLogSubscription',
'ds:DeleteSnapshot',
'ds:DeleteTrust',
'ds:DeregisterEventTopic',
'ds:DescribeConditionalForwarders',
'ds:DescribeDirectories',
'ds:DescribeDomainControllers',
'ds:DescribeEventTopics',
'ds:DescribeSharedDirectories',
'ds:DescribeSnapshots',
'ds:DescribeTrusts',
'ds:DisableRadius',
'ds:DisableSso',
'ds:EnableRadius',
'ds:EnableSso',
'ds:GetAuthorizedApplicationDetails [permission only]',
'ds:GetDirectoryLimits',
'ds:GetSnapshotLimits',
'ds:ListIpRoutes',
'ds:ListLogSubscriptions',
'ds:ListSchemaExtensions',
'ds:ListTagsForResource',
'ds:RegisterEventTopic',
'ds:RejectSharedDirectory',
'ds:RemoveIpRoutes',
'ds:RemoveTagsFromResource',
'ds:ResetUserPassword',
'ds:RestoreFromSnapshot',
'ds:ShareDirectory',
'ds:StartSchemaExtension',
'ds:UnshareDirectory',
'ds:UpdateConditionalForwarder',
'ds:UpdateNumberOfDomainControllers',
'ds:UpdateRadius',
'ds:VerifyTrust',
'dynamodb:BatchGetItem',
'dynamodb:BatchWriteItem',
'dynamodb:ConditionCheckItem',
'dynamodb:CreateBackup',
'dynamodb:CreateGlobalTable',
'dynamodb:CreateTable',
'dynamodb:DeleteBackup',
'dynamodb:DeleteItem',
'dynamodb:DeleteTable',
'dynamodb:DescribeBackup',
'dynamodb:DescribeContinuousBackups',
'dynamodb:DescribeGlobalTable',
'dynamodb:DescribeGlobalTableSettings',
'dynamodb:DescribeLimits',
'dynamodb:DescribeReservedCapacity',
'dynamodb:DescribeReservedCapacityOfferings',
'dynamodb:DescribeStream',
'dynamodb:DescribeTable',
'dynamodb:DescribeTimeToLive',
'dynamodb:GetItem',
'dynamodb:GetRecords',
'dynamodb:GetShardIterator',
'dynamodb:ListBackups',
'dynamodb:ListGlobalTables',
'dynamodb:ListStreams',
'dynamodb:ListTables',
'dynamodb:ListTagsOfResource',
'dynamodb:PurchaseReservedCapacityOfferings',
'dynamodb:PutItem',
'dynamodb:Query',
'dynamodb:RestoreTableFromBackup',
'dynamodb:RestoreTableToPointInTime',
'dynamodb:Scan',
'dynamodb:TagResource',
'dynamodb:UntagResource',
'dynamodb:UpdateContinuousBackups',
'dynamodb:UpdateGlobalTable',
'dynamodb:UpdateGlobalTableSettings',
'dynamodb:UpdateItem',
'dynamodb:UpdateTable',
'dynamodb:UpdateTimeToLive',
'dax:BatchGetItem',
'dax:BatchWriteItem',
'dax:ConditionCheckItem',
'dax:CreateCluster',
'dax:CreateParameterGroup',
'dax:CreateSubnetGroup',
'dax:DecreaseReplicationFactor',
'dax:DeleteCluster',
'dax:DeleteItem',
'dax:DeleteParameterGroup',
'dax:DeleteSubnetGroup',
'dax:DescribeClusters',
'dax:DescribeDefaultParameters',
'dax:DescribeEvents',
'dax:DescribeParameterGroups',
'dax:DescribeParameters',
'dax:DescribeSubnetGroups',
'dax:GetItem',
'dax:IncreaseReplicationFactor',
'dax:ListTags',
'dax:PutItem',
'dax:Query',
'dax:RebootNode',
'dax:Scan',
'dax:TagResource',
'dax:UntagResource',
'dax:UpdateCluster',
'dax:UpdateItem',
'dax:UpdateParameterGroup',
'dax:UpdateSubnetGroup',
'ec2:AcceptReservedInstancesExchangeQuote',
'ec2:AcceptTransitGatewayVpcAttachment',
'ec2:AcceptVpcEndpointConnections',
'ec2:AcceptVpcPeeringConnection',
'ec2:AdvertiseByoipCidr',
'ec2:AllocateAddress',
'ec2:AllocateHosts',
'ec2:ApplySecurityGroupsToClientVpnTargetNetwork',
'ec2:AssignIpv6Addresses',
'ec2:AssignPrivateIpAddresses',
'ec2:AssociateAddress',
'ec2:AssociateClientVpnTargetNetwork',
'ec2:AssociateDhcpOptions',
'ec2:AssociateIamInstanceProfile',
'ec2:AssociateRouteTable',
'ec2:AssociateSubnetCidrBlock',
'ec2:AssociateTransitGatewayRouteTable',
'ec2:AssociateVpcCidrBlock',
'ec2:AttachClassicLinkVpc',
'ec2:AttachInternetGateway',
'ec2:AttachNetworkInterface',
'ec2:AttachVolume',
'ec2:AttachVpnGateway',
'ec2:AuthorizeClientVpnIngress',
'ec2:AuthorizeSecurityGroupEgress',
'ec2:AuthorizeSecurityGroupIngress',
'ec2:BundleInstance',
'ec2:CancelBundleTask',
'ec2:CancelCapacityReservation',
'ec2:CancelConversionTask',
'ec2:CancelExportTask',
'ec2:CancelImportTask',
'ec2:CancelReservedInstancesListing',
'ec2:CancelSpotFleetRequests',
'ec2:CancelSpotInstanceRequests',
'ec2:ConfirmProductInstance',
'ec2:CopyFpgaImage',
'ec2:CopyImage',
'ec2:CopySnapshot',
'ec2:CreateCapacityReservation',
'ec2:CreateClientVpnEndpoint',
'ec2:CreateClientVpnRoute',
'ec2:CreateCustomerGateway',
'ec2:CreateDefaultSubnet',
'ec2:CreateDefaultVpc',
'ec2:CreateDhcpOptions',
'ec2:CreateEgressOnlyInternetGateway',
'ec2:CreateFleet',
'ec2:CreateFlowLogs',
'ec2:CreateFpgaImage',
'ec2:CreateImage',
'ec2:CreateInstanceExportTask',
'ec2:CreateInternetGateway',
'ec2:CreateKeyPair',
'ec2:CreateLaunchTemplate',
'ec2:CreateLaunchTemplateVersion',
'ec2:CreateNatGateway',
'ec2:CreateNetworkAcl',
'ec2:CreateNetworkAclEntry',
'ec2:CreateNetworkInterface',
'ec2:CreateNetworkInterfacePermission',
'ec2:CreatePlacementGroup',
'ec2:CreateReservedInstancesListing',
'ec2:CreateRoute',
'ec2:CreateRouteTable',
'ec2:CreateSecurityGroup',
'ec2:CreateSnapshot',
'ec2:CreateSnapshots',
'ec2:CreateSpotDatafeedSubscription',
'ec2:CreateSubnet',
'ec2:CreateTags',
'ec2:CreateTransitGateway',
'ec2:CreateTransitGatewayRoute',
'ec2:CreateTransitGatewayRouteTable',
'ec2:CreateTransitGatewayVpcAttachment',
'ec2:CreateVolume',
'ec2:CreateVpc',
'ec2:CreateVpcEndpoint',
'ec2:CreateVpcEndpointConnectionNotification',
'ec2:CreateVpcEndpointServiceConfiguration',
'ec2:CreateVpcPeeringConnection',
'ec2:CreateVpnConnection',
'ec2:CreateVpnConnectionRoute',
'ec2:CreateVpnGateway',
'ec2:DeleteClientVpnEndpoint',
'ec2:DeleteClientVpnRoute',
'ec2:DeleteCustomerGateway',
'ec2:DeleteDhcpOptions',
'ec2:DeleteEgressOnlyInternetGateway',
'ec2:DeleteFleets',
'ec2:DeleteFlowLogs',
'ec2:DeleteFpgaImage',
'ec2:DeleteInternetGateway',
'ec2:DeleteKeyPair',
'ec2:DeleteLaunchTemplate',
'ec2:DeleteLaunchTemplateVersions',
'ec2:DeleteNatGateway',
'ec2:DeleteNetworkAcl',
'ec2:DeleteNetworkAclEntry',
'ec2:DeleteNetworkInterface',
'ec2:DeleteNetworkInterfacePermission',
'ec2:DeletePlacementGroup',
'ec2:DeleteRoute',
'ec2:DeleteRouteTable',
'ec2:DeleteSecurityGroup',
'ec2:DeleteSnapshot',
'ec2:DeleteSpotDatafeedSubscription',
'ec2:DeleteSubnet',
'ec2:DeleteTags',
'ec2:DeleteTransitGateway',
'ec2:DeleteTransitGatewayRoute',
'ec2:DeleteTransitGatewayRouteTable',
'ec2:DeleteTransitGatewayVpcAttachment',
'ec2:DeleteVolume',
'ec2:DeleteVpc',
'ec2:DeleteVpcEndpointConnectionNotifications',
'ec2:DeleteVpcEndpointServiceConfigurations',
'ec2:DeleteVpcEndpoints',
'ec2:DeleteVpcPeeringConnection',
'ec2:DeleteVpnConnection',
'ec2:DeleteVpnConnectionRoute',
'ec2:DeleteVpnGateway',
'ec2:DeprovisionByoipCidr',
'ec2:DeregisterImage',
'ec2:DescribeAccountAttributes',
'ec2:DescribeAddresses',
'ec2:DescribeAggregateIdFormat',
'ec2:DescribeAvailabilityZones',
'ec2:DescribeBundleTasks',
'ec2:DescribeByoipCidrs',
'ec2:DescribeCapacityReservations',
'ec2:DescribeClassicLinkInstances',
'ec2:DescribeClientVpnAuthorizationRules',
'ec2:DescribeClientVpnConnections',
'ec2:DescribeClientVpnEndpoints',
'ec2:DescribeClientVpnRoutes',
'ec2:DescribeClientVpnTargetNetworks',
'ec2:DescribeConversionTasks',
'ec2:DescribeCustomerGateways',
'ec2:DescribeDhcpOptions',
'ec2:DescribeEgressOnlyInternetGateways',
'ec2:DescribeElasticGpus',
'ec2:DescribeExportTasks',
'ec2:DescribeFleetHistory',
'ec2:DescribeFleetInstances',
'ec2:DescribeFleets',
'ec2:DescribeFlowLogs',
'ec2:DescribeFpgaImageAttribute',
'ec2:DescribeFpgaImages',
'ec2:DescribeHostReservationOfferings',
'ec2:DescribeHostReservations',
'ec2:DescribeHosts',
'ec2:DescribeIamInstanceProfileAssociations',
'ec2:DescribeIdFormat',
'ec2:DescribeIdentityIdFormat',
'ec2:DescribeImageAttribute',
'ec2:DescribeImages',
'ec2:DescribeImportImageTasks',
'ec2:DescribeImportSnapshotTasks',
'ec2:DescribeInstanceAttribute',
'ec2:DescribeInstanceCreditSpecifications',
'ec2:DescribeInstanceStatus',
'ec2:DescribeInstances',
'ec2:DescribeInternetGateways',
'ec2:DescribeKeyPairs',
'ec2:DescribeLaunchTemplateVersions',
'ec2:DescribeLaunchTemplates',
'ec2:DescribeMovingAddresses',
'ec2:DescribeNatGateways',
'ec2:DescribeNetworkAcls',
'ec2:DescribeNetworkInterfaceAttribute',
'ec2:DescribeNetworkInterfacePermissions',
'ec2:DescribeNetworkInterfaces',
'ec2:DescribePlacementGroups',
'ec2:DescribePrefixLists',
'ec2:DescribePrincipalIdFormat',
'ec2:DescribePublicIpv4Pools',
'ec2:DescribeRegions',
'ec2:DescribeReservedInstances',
'ec2:DescribeReservedInstancesListings',
'ec2:DescribeReservedInstancesModifications',
'ec2:DescribeReservedInstancesOfferings',
'ec2:DescribeRouteTables',
'ec2:DescribeScheduledInstanceAvailability',
'ec2:DescribeScheduledInstances',
'ec2:DescribeSecurityGroupReferences',
'ec2:DescribeSecurityGroups',
'ec2:DescribeSnapshotAttribute',
'ec2:DescribeSnapshots',
'ec2:DescribeSpotDatafeedSubscription',
'ec2:DescribeSpotFleetInstances',
'ec2:DescribeSpotFleetRequestHistory',
'ec2:DescribeSpotFleetRequests',
'ec2:DescribeSpotInstanceRequests',
'ec2:DescribeSpotPriceHistory',
'ec2:DescribeStaleSecurityGroups',
'ec2:DescribeSubnets',
'ec2:DescribeTags',
'ec2:DescribeTransitGatewayAttachments',
'ec2:DescribeTransitGatewayRouteTables',
'ec2:DescribeTransitGatewayVpcAttachments',
'ec2:DescribeTransitGateways',
'ec2:DescribeVolumeAttribute',
'ec2:DescribeVolumeStatus',
'ec2:DescribeVolumes',
'ec2:DescribeVolumesModifications',
'ec2:DescribeVpcAttribute',
'ec2:DescribeVpcClassicLink',
'ec2:DescribeVpcClassicLinkDnsSupport',
'ec2:DescribeVpcEndpointConnectionNotifications',
'ec2:DescribeVpcEndpointConnections',
'ec2:DescribeVpcEndpointServiceConfigurations',
'ec2:DescribeVpcEndpointServicePermissions',
'ec2:DescribeVpcEndpointServices',
'ec2:DescribeVpcEndpoints',
'ec2:DescribeVpcPeeringConnections',
'ec2:DescribeVpcs',
'ec2:DescribeVpnConnections',
'ec2:DescribeVpnGateways',
'ec2:DetachClassicLinkVpc',
'ec2:DetachInternetGateway',
'ec2:DetachNetworkInterface',
'ec2:DetachVolume',
'ec2:DetachVpnGateway',
'ec2:DisableTransitGatewayRouteTablePropagation',
'ec2:DisableVgwRoutePropagation',
'ec2:DisableVpcClassicLink',
'ec2:DisableVpcClassicLinkDnsSupport',
'ec2:DisassociateAddress',
'ec2:DisassociateClientVpnTargetNetwork',
'ec2:DisassociateIamInstanceProfile',
'ec2:DisassociateRouteTable',
'ec2:DisassociateSubnetCidrBlock',
'ec2:DisassociateTransitGatewayRouteTable',
'ec2:DisassociateVpcCidrBlock',
'ec2:EnableTransitGatewayRouteTablePropagation',
'ec2:EnableVgwRoutePropagation',
'ec2:EnableVolumeIO',
'ec2:EnableVpcClassicLink',
'ec2:EnableVpcClassicLinkDnsSupport',
'ec2:ExportClientVpnClientCertificateRevocationList',
'ec2:ExportClientVpnClientConfiguration',
'ec2:ExportTransitGatewayRoutes',
'ec2:GetConsoleOutput',
'ec2:GetConsoleScreenshot',
'ec2:GetHostReservationPurchasePreview',
'ec2:GetLaunchTemplateData',
'ec2:GetPasswordData',
'ec2:GetReservedInstancesExchangeQuote',
'ec2:GetTransitGatewayAttachmentPropagations',
'ec2:GetTransitGatewayRouteTableAssociations',
'ec2:GetTransitGatewayRouteTablePropagations',
'ec2:ImportClientVpnClientCertificateRevocationList',
'ec2:ImportImage',
'ec2:ImportInstance',
'ec2:ImportKeyPair',
'ec2:ImportSnapshot',
'ec2:ImportVolume',
'ec2:ModifyCapacityReservation',
'ec2:ModifyClientVpnEndpoint',
'ec2:ModifyFleet',
'ec2:ModifyFpgaImageAttribute',
'ec2:ModifyHosts',
'ec2:ModifyIdFormat',
'ec2:ModifyIdentityIdFormat',
'ec2:ModifyImageAttribute',
'ec2:ModifyInstanceAttribute',
'ec2:ModifyInstanceCapacityReservationAttributes',
'ec2:ModifyInstanceCreditSpecification',
'ec2:ModifyInstanceEventStartTime',
'ec2:ModifyInstancePlacement',
'ec2:ModifyLaunchTemplate',
'ec2:ModifyNetworkInterfaceAttribute',
'ec2:ModifyReservedInstances',
'ec2:ModifySnapshotAttribute',
'ec2:ModifySpotFleetRequest',
'ec2:ModifySubnetAttribute',
'ec2:ModifyTransitGatewayVpcAttachment',
'ec2:ModifyVolume',
'ec2:ModifyVolumeAttribute',
'ec2:ModifyVpcAttribute',
'ec2:ModifyVpcEndpoint',
'ec2:ModifyVpcEndpointConnectionNotification',
'ec2:ModifyVpcEndpointServiceConfiguration',
'ec2:ModifyVpcEndpointServicePermissions',
'ec2:ModifyVpcPeeringConnectionOptions',
'ec2:ModifyVpcTenancy',
'ec2:MonitorInstances',
'ec2:MoveAddressToVpc',
'ec2:ProvisionByoipCidr',
'ec2:PurchaseHostReservation',
'ec2:PurchaseReservedInstancesOffering',
'ec2:PurchaseScheduledInstances',
'ec2:RebootInstances',
'ec2:RegisterImage',
'ec2:RejectTransitGatewayVpcAttachment',
'ec2:RejectVpcEndpointConnections',
'ec2:RejectVpcPeeringConnection',
'ec2:ReleaseAddress',
'ec2:ReleaseHosts',
'ec2:ReplaceIamInstanceProfileAssociation',
'ec2:ReplaceNetworkAclAssociation',
'ec2:ReplaceNetworkAclEntry',
'ec2:ReplaceRoute',
'ec2:ReplaceRouteTableAssociation',
'ec2:ReplaceTransitGatewayRoute',
'ec2:ReportInstanceStatus',
'ec2:RequestSpotFleet',
'ec2:RequestSpotInstances',
'ec2:ResetFpgaImageAttribute',
'ec2:ResetImageAttribute',
'ec2:ResetInstanceAttribute',
'ec2:ResetNetworkInterfaceAttribute',
'ec2:ResetSnapshotAttribute',
'ec2:RestoreAddressToClassic',
'ec2:RevokeClientVpnIngress',
'ec2:RevokeSecurityGroupEgress',
'ec2:RevokeSecurityGroupIngress',
'ec2:RunInstances',
'ec2:RunScheduledInstances',
'ec2:SearchTransitGatewayRoutes',
'ec2:StartInstances',
'ec2:StopInstances',
'ec2:TerminateClientVpnConnections',
'ec2:TerminateInstances',
'ec2:UnassignIpv6Addresses',
'ec2:UnassignPrivateIpAddresses',
'ec2:UnmonitorInstances',
'ec2:UpdateSecurityGroupRuleDescriptionsEgress',
'ec2:UpdateSecurityGroupRuleDescriptionsIngress',
'ec2:WithdrawByoipCidr',
'autoscaling:AttachInstances',
'autoscaling:AttachLoadBalancerTargetGroups',
'autoscaling:AttachLoadBalancers',
'autoscaling:BatchDeleteScheduledAction',
'autoscaling:BatchPutScheduledUpdateGroupAction',
'autoscaling:CompleteLifecycleAction',
'autoscaling:CreateAutoScalingGroup',
'autoscaling:CreateLaunchConfiguration',
'autoscaling:CreateOrUpdateTags',
'autoscaling:DeleteAutoScalingGroup',
'autoscaling:DeleteLaunchConfiguration',
'autoscaling:DeleteLifecycleHook',
'autoscaling:DeleteNotificationConfiguration',
'autoscaling:DeletePolicy',
'autoscaling:DeleteScheduledAction',
'autoscaling:DeleteTags',
'autoscaling:DescribeAccountLimits',
'autoscaling:DescribeAdjustmentTypes',
'autoscaling:DescribeAutoScalingGroups',
'autoscaling:DescribeAutoScalingInstances',
'autoscaling:DescribeAutoScalingNotificationTypes',
'autoscaling:DescribeLaunchConfigurations',
'autoscaling:DescribeLifecycleHookTypes',
'autoscaling:DescribeLifecycleHooks',
'autoscaling:DescribeLoadBalancerTargetGroups',
'autoscaling:DescribeLoadBalancers',
'autoscaling:DescribeMetricCollectionTypes',
'autoscaling:DescribeNotificationConfigurations',
'autoscaling:DescribePolicies',
'autoscaling:DescribeScalingActivities',
'autoscaling:DescribeScalingProcessTypes',
'autoscaling:DescribeScheduledActions',
'autoscaling:DescribeTags',
'autoscaling:DescribeTerminationPolicyTypes',
'autoscaling:DetachInstances',
'autoscaling:DetachLoadBalancerTargetGroups',
'autoscaling:DetachLoadBalancers',
'autoscaling:DisableMetricsCollection',
'autoscaling:EnableMetricsCollection',
'autoscaling:EnterStandby',
'autoscaling:ExecutePolicy',
'autoscaling:ExitStandby',
'autoscaling:PutLifecycleHook',
'autoscaling:PutNotificationConfiguration',
'autoscaling:PutScalingPolicy',
'autoscaling:PutScheduledUpdateGroupAction',
'autoscaling:RecordLifecycleActionHeartbeat',
'autoscaling:ResumeProcesses',
'autoscaling:SetDesiredCapacity',
'autoscaling:SetInstanceHealth',
'autoscaling:SetInstanceProtection',
'autoscaling:SuspendProcesses',
'autoscaling:TerminateInstanceInAutoScalingGroup',
'autoscaling:UpdateAutoScalingGroup',
'ec2-instance-connect:SendSSHPublicKey',
'elasticbeanstalk:AbortEnvironmentUpdate',
'elasticbeanstalk:AddTags',
'elasticbeanstalk:ApplyEnvironmentManagedAction',
'elasticbeanstalk:CheckDNSAvailability',
'elasticbeanstalk:ComposeEnvironments',
'elasticbeanstalk:CreateApplication',
'elasticbeanstalk:CreateApplicationVersion',
'elasticbeanstalk:CreateConfigurationTemplate',
'elasticbeanstalk:CreateEnvironment',
'elasticbeanstalk:CreatePlatformVersion',
'elasticbeanstalk:CreateStorageLocation',
'elasticbeanstalk:DeleteApplication',
'elasticbeanstalk:DeleteApplicationVersion',
'elasticbeanstalk:DeleteConfigurationTemplate',
'elasticbeanstalk:DeleteEnvironmentConfiguration',
'elasticbeanstalk:DeletePlatformVersion',
'elasticbeanstalk:DescribeAccountAttributes',
'elasticbeanstalk:DescribeApplicationVersions',
'elasticbeanstalk:DescribeApplications',
'elasticbeanstalk:DescribeConfigurationOptions',
'elasticbeanstalk:DescribeConfigurationSettings',
'elasticbeanstalk:DescribeEnvironmentHealth',
'elasticbeanstalk:DescribeEnvironmentManagedActionHistory',
'elasticbeanstalk:DescribeEnvironmentManagedActions',
'elasticbeanstalk:DescribeEnvironmentResources',
'elasticbeanstalk:DescribeEnvironments',
'elasticbeanstalk:DescribeEvents',
'elasticbeanstalk:DescribeInstancesHealth',
'elasticbeanstalk:DescribePlatformVersion',
'elasticbeanstalk:ListAvailableSolutionStacks',
'elasticbeanstalk:ListPlatformVersions',
'elasticbeanstalk:ListTagsForResource',
'elasticbeanstalk:RebuildEnvironment',
'elasticbeanstalk:RemoveTags',
'elasticbeanstalk:RequestEnvironmentInfo',
'elasticbeanstalk:RestartAppServer',
'elasticbeanstalk:RetrieveEnvironmentInfo',
'elasticbeanstalk:SwapEnvironmentCNAMEs',
'elasticbeanstalk:TerminateEnvironment',
'elasticbeanstalk:UpdateApplication',
'elasticbeanstalk:UpdateApplicationResourceLifecycle',
'elasticbeanstalk:UpdateApplicationVersion',
'elasticbeanstalk:UpdateConfigurationTemplate',
'elasticbeanstalk:UpdateEnvironment',
'elasticbeanstalk:ValidateConfigurationSettings',
'ecr:BatchCheckLayerAvailability',
'ecr:BatchDeleteImage',
'ecr:BatchGetImage',
'ecr:CompleteLayerUpload',
'ecr:CreateRepository',
'ecr:DeleteLifecyclePolicy',
'ecr:DeleteRepository',
'ecr:DeleteRepositoryPolicy',
'ecr:DescribeImages',
'ecr:DescribeRepositories',
'ecr:GetAuthorizationToken',
'ecr:GetDownloadUrlForLayer',
'ecr:GetLifecyclePolicy',
'ecr:GetLifecyclePolicyPreview',
'ecr:GetRepositoryPolicy',
'ecr:InitiateLayerUpload',
'ecr:ListImages',
'ecr:ListTagsForResource',
'ecr:PutImage',
'ecr:PutLifecyclePolicy',
'ecr:SetRepositoryPolicy',
'ecr:StartLifecyclePolicyPreview',
'ecr:TagResource',
'ecr:UntagResource',
'ecr:UploadLayerPart',
'ecs:CreateCluster',
'ecs:CreateService',
'ecs:CreateTaskSet',
'ecs:DeleteAccountSetting',
'ecs:DeleteAttributes',
'ecs:DeleteCluster',
'ecs:DeleteService',
'ecs:DeleteTaskSet',
'ecs:DeregisterContainerInstance',
'ecs:DeregisterTaskDefinition',
'ecs:DescribeClusters',
'ecs:DescribeContainerInstances',
'ecs:DescribeServices',
'ecs:DescribeTaskDefinition',
'ecs:DescribeTaskSets',
'ecs:DescribeTasks',
'ecs:DiscoverPollEndpoint',
'ecs:ListAccountSettings',
'ecs:ListAttributes',
'ecs:ListClusters',
'ecs:ListContainerInstances',
'ecs:ListServices',
'ecs:ListTagsForResource',
'ecs:ListTaskDefinitionFamilies',
'ecs:ListTaskDefinitions',
'ecs:ListTasks',
'ecs:Poll[permission only]',
'ecs:PutAccountSetting',
'ecs:PutAccountSettingDefault',
'ecs:PutAttributes',
'ecs:RegisterContainerInstance',
'ecs:RegisterTaskDefinition',
'ecs:RunTask',
'ecs:StartTask',
'ecs:StopTask',
'ecs:SubmitContainerStateChange',
'ecs:SubmitTaskStateChange',
'ecs:TagResource',
'ecs:UntagResource',
'ecs:UpdateContainerAgent',
'ecs:UpdateContainerInstancesState',
'ecs:UpdateService',
'ecs:UpdateServicePrimaryTaskSet',
'ecs:UpdateTaskSet',
'eks:CreateCluster',
'eks:DeleteCluster',
'eks:DescribeCluster',
'eks:DescribeUpdate',
'eks:ListClusters',
'eks:ListUpdates',
'eks:UpdateClusterVersion',
'elasticfilesystem:CreateFileSystem',
'elasticfilesystem:CreateMountTarget',
'elasticfilesystem:CreateTags',
'elasticfilesystem:DeleteFileSystem',
'elasticfilesystem:DeleteMountTarget',
'elasticfilesystem:DeleteTags',
'elasticfilesystem:DescribeFileSystems',
'elasticfilesystem:DescribeLifecycleConfiguration',
'elasticfilesystem:DescribeMountTargetSecurityGroups',
'elasticfilesystem:DescribeMountTargets',
'elasticfilesystem:DescribeTags',
'elasticfilesystem:ModifyMountTargetSecurityGroups',
'elasticfilesystem:PutLifecycleConfiguration',
'elasticfilesystem:UpdateFileSystem',
'elastic-inference:Connect',
'elasticloadbalancing:AddTags',
'elasticloadbalancing:ApplySecurityGroupsToLoadBalancer',
'elasticloadbalancing:AttachLoadBalancerToSubnets',
'elasticloadbalancing:ConfigureHealthCheck',
'elasticloadbalancing:CreateAppCookieStickinessPolicy',
'elasticloadbalancing:CreateLBCookieStickinessPolicy',
'elasticloadbalancing:CreateLoadBalancer',
'elasticloadbalancing:CreateLoadBalancerListeners',
'elasticloadbalancing:CreateLoadBalancerPolicy',
'elasticloadbalancing:DeleteLoadBalancer',
'elasticloadbalancing:DeleteLoadBalancerListeners',
'elasticloadbalancing:DeleteLoadBalancerPolicy',
'elasticloadbalancing:DeregisterInstancesFromLoadBalancer',
'elasticloadbalancing:DescribeInstanceHealth',
'elasticloadbalancing:DescribeLoadBalancerAttributes',
'elasticloadbalancing:DescribeLoadBalancerPolicies',
'elasticloadbalancing:DescribeLoadBalancerPolicyTypes',
'elasticloadbalancing:DescribeLoadBalancers',
'elasticloadbalancing:DescribeTags',
'elasticloadbalancing:DetachLoadBalancerFromSubnets',
'elasticloadbalancing:DisableAvailabilityZonesForLoadBalancer',
'elasticloadbalancing:EnableAvailabilityZonesForLoadBalancer',
'elasticloadbalancing:ModifyLoadBalancerAttributes',
'elasticloadbalancing:RegisterInstancesWithLoadBalancer',
'elasticloadbalancing:RemoveTags',
'elasticloadbalancing:SetLoadBalancerListenerSSLCertificate',
'elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer',
'elasticloadbalancing:SetLoadBalancerPoliciesOfListener',
'elasticloadbalancing:AddListenerCertificates',
'elasticloadbalancing:AddTags',
'elasticloadbalancing:CreateListener',
'elasticloadbalancing:CreateLoadBalancer',
'elasticloadbalancing:CreateRule',
'elasticloadbalancing:CreateTargetGroup',
'elasticloadbalancing:DeleteListener',
'elasticloadbalancing:DeleteLoadBalancer',
'elasticloadbalancing:DeleteRule',
'elasticloadbalancing:DeleteTargetGroup',
'elasticloadbalancing:DeregisterTargets',
'elasticloadbalancing:DescribeAccountLimits',
'elasticloadbalancing:DescribeListenerCertificates',
'elasticloadbalancing:DescribeListeners',
'elasticloadbalancing:DescribeLoadBalancerAttributes',
'elasticloadbalancing:DescribeLoadBalancers',
'elasticloadbalancing:DescribeRules',
'elasticloadbalancing:DescribeSSLPolicies',
'elasticloadbalancing:DescribeTags',
'elasticloadbalancing:DescribeTargetGroupAttributes',
'elasticloadbalancing:DescribeTargetGroups',
'elasticloadbalancing:DescribeTargetHealth',
'elasticloadbalancing:ModifyListener',
'elasticloadbalancing:ModifyLoadBalancerAttributes',
'elasticloadbalancing:ModifyRule',
'elasticloadbalancing:ModifyTargetGroup',
'elasticloadbalancing:ModifyTargetGroupAttributes',
'elasticloadbalancing:RegisterTargets',
'elasticloadbalancing:RemoveListenerCertificates',
'elasticloadbalancing:RemoveTags',
'elasticloadbalancing:SetIpAddressType',
'elasticloadbalancing:SetRulePriorities',
'elasticloadbalancing:SetSecurityGroups',
'elasticloadbalancing:SetSubnets',
'elasticloadbalancing:SetWebAcl [permission only]',
'elasticmapreduce:AddInstanceFleet',
'elasticmapreduce:AddInstanceGroups',
'elasticmapreduce:AddJobFlowSteps',
'elasticmapreduce:AddTags',
'elasticmapreduce:CancelSteps',
'elasticmapreduce:CreateEditor[permission only]',
'elasticmapreduce:CreateSecurityConfiguration',
'elasticmapreduce:DeleteEditor[permission only]',
'elasticmapreduce:DeleteSecurityConfiguration',
'elasticmapreduce:DescribeCluster',
'elasticmapreduce:DescribeEditor [permission only]',
'elasticmapreduce:DescribeSecurityConfiguration',
'elasticmapreduce:DescribeStep',
'elasticmapreduce:ListBootstrapActions',
'elasticmapreduce:ListClusters',
'elasticmapreduce:ListEditors [permission only]',
'elasticmapreduce:ListInstanceFleets',
'elasticmapreduce:ListInstanceGroups',
'elasticmapreduce:ListInstances',
'elasticmapreduce:ListSecurityConfigurations',
'elasticmapreduce:ListSteps',
'elasticmapreduce:ModifyInstanceFleet',
'elasticmapreduce:ModifyInstanceGroups',
'elasticmapreduce:OpenEditorInConsole[permission only]',
'elasticmapreduce:PutAutoScalingPolicy',
'elasticmapreduce:RemoveAutoScalingPolicy',
'elasticmapreduce:RemoveTags',
'elasticmapreduce:RunJobFlow',
'elasticmapreduce:SetTerminationProtection',
'elasticmapreduce:StartEditor[permission only]',
'elasticmapreduce:StopEditor[permission only]',
'elasticmapreduce:TerminateJobFlows',
'elasticmapreduce:ViewEventsFromAllClustersInConsole [permission only]',
'elastictranscoder:CancelJob',
'elastictranscoder:CreateJob',
'elastictranscoder:CreatePipeline',
'elastictranscoder:CreatePreset',
'elastictranscoder:DeletePipeline',
'elastictranscoder:DeletePreset',
'elastictranscoder:ListJobsByPipeline',
'elastictranscoder:ListJobsByStatus',
'elastictranscoder:ListPipelines',
'elastictranscoder:ListPresets',
'elastictranscoder:ReadJob',
'elastictranscoder:ReadPipeline',
'elastictranscoder:ReadPreset',
'elastictranscoder:TestRole',
'elastictranscoder:UpdatePipeline',
'elastictranscoder:UpdatePipelineNotifications',
'elastictranscoder:UpdatePipelineStatus',
'elasticache:AddTagsToResource',
'elasticache:AuthorizeCacheSecurityGroupIngress',
'elasticache:CopySnapshot',
'elasticache:CreateCacheCluster',
'elasticache:CreateCacheParameterGroup',
'elasticache:CreateCacheSecurityGroup',
'elasticache:CreateCacheSubnetGroup',
'elasticache:CreateReplicationGroup',
'elasticache:CreateSnapshot',
'elasticache:DecreaseReplicaCount',
'elasticache:DeleteCacheCluster',
'elasticache:DeleteCacheParameterGroup',
'elasticache:DeleteCacheSecurityGroup',
'elasticache:DeleteCacheSubnetGroup',
'elasticache:DeleteReplicationGroup',
'elasticache:DeleteSnapshot',
'elasticache:DescribeCacheClusters',
'elasticache:DescribeCacheEngineVersions',
'elasticache:DescribeCacheParameterGroups',
'elasticache:DescribeCacheParameters',
'elasticache:DescribeCacheSecurityGroups',
'elasticache:DescribeCacheSubnetGroups',
'elasticache:DescribeEngineDefaultParameters',
'elasticache:DescribeEvents',
'elasticache:DescribeReplicationGroups',
'elasticache:DescribeReservedCacheNodes',
'elasticache:DescribeReservedCacheNodesOfferings',
'elasticache:DescribeSnapshots',
'elasticache:IncreaseReplicaCount',
'elasticache:ListAllowedNodeTypeModifications',
'elasticache:ListTagsForResource',
'elasticache:ModifyCacheCluster',
'elasticache:ModifyCacheParameterGroup',
'elasticache:ModifyCacheSubnetGroup',
'elasticache:ModifyReplicationGroup',
'elasticache:ModifyReplicationGroupShardConfiguration',
'elasticache:PurchaseReservedCacheNodesOffering',
'elasticache:RebootCacheCluster',
'elasticache:RemoveTagsFromResource',
'elasticache:ResetCacheParameterGroup',
'elasticache:RevokeCacheSecurityGroupIngress',
'elasticache:TestFailover',
'es:AddTags',
'es:CreateElasticsearchDomain',
'es:DeleteElasticsearchDomain',
'es:DeleteElasticsearchServiceRole',
'es:DescribeElasticsearchDomain',
'es:DescribeElasticsearchDomainConfig',
'es:DescribeElasticsearchDomains',
'es:DescribeElasticsearchInstanceTypeLimits',
'es:DescribeReservedElasticsearchInstanceOfferings',
'es:DescribeReservedElasticsearchInstances',
'es:ESHttpDelete',
'es:ESHttpGet',
'es:ESHttpHead',
'es:ESHttpPost',
'es:ESHttpPut',
'es:GetCompatibleElasticsearchVersions',
'es:GetUpgradeHistory',
'es:GetUpgradeStatus',
'es:ListDomainNames',
'es:ListElasticsearchInstanceTypes',
'es:ListElasticsearchVersions',
'es:ListTags',
'es:PurchaseReservedElasticsearchInstance',
'es:RemoveTags',
'es:UpdateElasticsearchDomainConfig',
'es:UpgradeElasticsearchDomain',
'mediaconnect:AddFlowOutputs',
'mediaconnect:CreateFlow',
'mediaconnect:DeleteFlow',
'mediaconnect:DescribeFlow',
'mediaconnect:GrantFlowEntitlements',
'mediaconnect:ListEntitlements',
'mediaconnect:ListFlows',
'mediaconnect:RemoveFlowOutput',
'mediaconnect:RevokeFlowEntitlement',
'mediaconnect:StartFlow',
'mediaconnect:StopFlow',
'mediaconnect:UpdateFlowEntitlement',
'mediaconnect:UpdateFlowOutput',
'mediaconnect:UpdateFlowSource',
'mediaconvert:AssociateCertificate',
'mediaconvert:CancelJob',
'mediaconvert:CreateJob',
'mediaconvert:CreateJobTemplate',
'mediaconvert:CreatePreset',
'mediaconvert:CreateQueue',
'mediaconvert:DeleteJobTemplate',
'mediaconvert:DeletePreset',
'mediaconvert:DeleteQueue',
'mediaconvert:DescribeEndpoints',
'mediaconvert:DisassociateCertificate',
'mediaconvert:GetJob',
'mediaconvert:GetJobTemplate',
'mediaconvert:GetPreset',
'mediaconvert:GetQueue',
'mediaconvert:ListJobTemplates',
'mediaconvert:ListJobs',
'mediaconvert:ListPresets',
'mediaconvert:ListQueues',
'mediaconvert:ListTagsForResource',
'mediaconvert:TagResource',
'mediaconvert:UntagResource',
'mediaconvert:UpdateJobTemplate',
'mediaconvert:UpdatePreset',
'mediaconvert:UpdateQueue',
'medialive:BatchUpdateSchedule',
'medialive:CreateChannel',
'medialive:CreateInput',
'medialive:CreateInputSecurityGroup',
'medialive:CreateTags',
'medialive:DeleteChannel',
'medialive:DeleteInput',
'medialive:DeleteInputSecurityGroup',
'medialive:DeleteReservation',
'medialive:DeleteTags',
'medialive:DescribeChannel',
'medialive:DescribeInput',
'medialive:DescribeInputSecurityGroup',
'medialive:DescribeOffering',
'medialive:DescribeReservation',
'medialive:DescribeSchedule',
'medialive:ListChannels',
'medialive:ListInputSecurityGroups',
'medialive:ListInputs',
'medialive:ListOfferings',
'medialive:ListReservations',
'medialive:ListTagsForResource',
'medialive:PurchaseOffering',
'medialive:StartChannel',
'medialive:StopChannel',
'medialive:UpdateChannel',
'medialive:UpdateChannelClass',
'medialive:UpdateInput',
'medialive:UpdateInputSecurityGroup',
'medialive:UpdateReservation',
'mediapackage:CreateChannel',
'mediapackage:CreateOriginEndpoint',
'mediapackage:DeleteChannel',
'mediapackage:DeleteOriginEndpoint',
'mediapackage:DescribeChannel',
'mediapackage:DescribeOriginEndpoint',
'mediapackage:ListChannels',
'mediapackage:ListOriginEndpoints',
'mediapackage:ListTagsForResource',
'mediapackage:RotateIngestEndpointCredentials',
'mediapackage:TagResource',
'mediapackage:UntagResource',
'mediapackage:UpdateChannel',
'mediapackage:UpdateOriginEndpoint',
'mediastore:CreateContainer',
'mediastore:DeleteContainer',
'mediastore:DeleteContainerPolicy',
'mediastore:DeleteCorsPolicy',
'mediastore:DeleteLifecyclePolicy',
'mediastore:DeleteObject',
'mediastore:DescribeContainer',
'mediastore:DescribeObject',
'mediastore:GetContainerPolicy',
'mediastore:GetCorsPolicy',
'mediastore:GetLifecyclePolicy',
'mediastore:GetObject',
'mediastore:ListContainers',
'mediastore:ListItems',
'mediastore:PutContainerPolicy',
'mediastore:PutCorsPolicy',
'mediastore:PutLifecyclePolicy',
'mediastore:PutObject',
'mediastore:StartAccessLogging',
'mediastore:StopAccessLogging',
'mediatailor:DeletePlaybackConfiguration',
'mediatailor:GetPlaybackConfiguration',
'mediatailor:ListPlaybackConfigurations',
'mediatailor:ListTagsForResource',
'mediatailor:PutPlaybackConfiguration',
'mediatailor:TagResource',
'mediatailor:UntagResource',
'fms:AssociateAdminAccount',
'fms:DeleteNotificationChannel',
'fms:DeletePolicy',
'fms:DisassociateAdminAccount',
'fms:GetAdminAccount',
'fms:GetComplianceDetail',
'fms:GetNotificationChannel',
'fms:GetPolicy',
'fms:GetProtectionStatus',
'fms:ListComplianceStatus',
'fms:ListMemberAccounts',
'fms:ListPolicies',
'fms:PutNotificationChannel',
'fms:PutPolicy',
'freertos:CreateSoftwareConfiguration',
'freertos:DeleteSoftwareConfiguration',
'freertos:DescribeHardwarePlatform',
'freertos:DescribeSoftwareConfiguration',
'freertos:GetSoftwareURL',
'freertos:GetSoftwareURLForConfiguration',
'freertos:ListFreeRTOSVersions',
'freertos:ListHardwarePlatforms',
'freertos:ListHardwareVendors',
'freertos:ListSoftwareConfigurations',
'freertos:UpdateSoftwareConfiguration',
'fsx:CreateBackup',
'fsx:CreateFileSystem',
'fsx:CreateFileSystemFromBackup',
'fsx:DeleteBackup',
'fsx:DeleteFileSystem',
'fsx:DescribeBackups',
'fsx:DescribeFileSystems',
'fsx:ListTagsForResource',
'fsx:TagResource',
'fsx:UntagResource',
'fsx:UpdateFileSystem',
'gamelift:CreateAlias',
'gamelift:CreateBuild',
'gamelift:CreateFleet',
'gamelift:CreateGameSession',
'gamelift:CreatePlayerSession',
'gamelift:CreatePlayerSessions',
'gamelift:DeleteAlias',
'gamelift:DeleteBuild',
'gamelift:DeleteFleet',
'gamelift:DeleteScalingPolicy',
'gamelift:DescribeAlias',
'gamelift:DescribeBuild',
'gamelift:DescribeEC2InstanceLimits',
'gamelift:DescribeFleetAttributes',
'gamelift:DescribeFleetCapacity',
'gamelift:DescribeFleetEvents',
'gamelift:DescribeFleetPortSettings',
'gamelift:DescribeFleetUtilization',
'gamelift:DescribeGameSessionDetails',
'gamelift:DescribeGameSessions',
'gamelift:DescribeInstances',
'gamelift:DescribePlayerSessions',
'gamelift:DescribeRuntimeConfiguration',
'gamelift:DescribeScalingPolicies',
'gamelift:GetGameSessionLogUrl',
'gamelift:GetInstanceAccess',
'gamelift:ListAliases',
'gamelift:ListBuilds',
'gamelift:ListFleets',
'gamelift:PutScalingPolicy',
'gamelift:RequestUploadCredentials',
'gamelift:ResolveAlias',
'gamelift:SearchGameSessions',
'gamelift:UpdateAlias',
'gamelift:UpdateBuild',
'gamelift:UpdateFleetAttributes',
'gamelift:UpdateFleetCapacity',
'gamelift:UpdateFleetPortSettings',
'gamelift:UpdateGameSession',
'gamelift:UpdateRuntimeConfiguration',
'glacier:AbortMultipartUpload',
'glacier:AbortVaultLock',
'glacier:AddTagsToVault',
'glacier:CompleteMultipartUpload',
'glacier:CompleteVaultLock',
'glacier:CreateVault',
'glacier:DeleteArchive',
'glacier:DeleteVault',
'glacier:DeleteVaultAccessPolicy',
'glacier:DeleteVaultNotifications',
'glacier:DescribeJob',
'glacier:DescribeVault',
'glacier:GetDataRetrievalPolicy',
'glacier:GetJobOutput',
'glacier:GetVaultAccessPolicy',
'glacier:GetVaultLock',
'glacier:GetVaultNotifications',
'glacier:InitiateJob',
'glacier:InitiateMultipartUpload',
'glacier:InitiateVaultLock',
'glacier:ListJobs',
'glacier:ListMultipartUploads',
'glacier:ListParts',
'glacier:ListProvisionedCapacity',
'glacier:ListTagsForVault',
'glacier:ListVaults',
'glacier:PurchaseProvisionedCapacity',
'glacier:RemoveTagsFromVault',
'glacier:SetDataRetrievalPolicy',
'glacier:SetVaultAccessPolicy',
'glacier:SetVaultNotifications',
'glacier:UploadArchive',
'glacier:UploadMultipartPart',
'globalaccelerator:CreateAccelerator',
'globalaccelerator:CreateEndpointGroup',
'globalaccelerator:CreateListener',
'globalaccelerator:DeleteAccelerator',
'globalaccelerator:DeleteEndpointGroup',
'globalaccelerator:DeleteListener',
'globalaccelerator:DescribeAccelerator',
'globalaccelerator:DescribeAcceleratorAttributes',
'globalaccelerator:DescribeEndpointGroup',
'globalaccelerator:DescribeListener',
'globalaccelerator:ListAccelerators',
'globalaccelerator:ListEndpointGroups',
'globalaccelerator:ListListeners',
'globalaccelerator:UpdateAccelerator',
'globalaccelerator:UpdateAcceleratorAttributes',
'globalaccelerator:UpdateEndpointGroup',
'globalaccelerator:UpdateListener',
'glue:BatchCreatePartition',
'glue:BatchDeleteConnection',
'glue:BatchDeletePartition',
'glue:BatchDeleteTable',
'glue:BatchDeleteTableVersion',
'glue:BatchGetCrawlers',
'glue:BatchGetDevEndpoints',
'glue:BatchGetJobs',
'glue:BatchGetPartition',
'glue:BatchGetTriggers',
'glue:BatchStopJobRun',
'glue:CreateClassifier',
'glue:CreateConnection',
'glue:CreateCrawler',
'glue:CreateDatabase',
'glue:CreateDevEndpoint',
'glue:CreateJob',
'glue:CreatePartition',
'glue:CreateScript',
'glue:CreateSecurityConfiguration',
'glue:CreateTable',
'glue:CreateTrigger',
'glue:CreateUserDefinedFunction',
'glue:DeleteClassifier',
'glue:DeleteConnection',
'glue:DeleteCrawler',
'glue:DeleteDatabase',
'glue:DeleteDevEndpoint',
'glue:DeleteJob',
'glue:DeletePartition',
'glue:DeleteResourcePolicy',
'glue:DeleteSecurityConfiguration',
'glue:DeleteTable',
'glue:DeleteTableVersion',
'glue:DeleteTrigger',
'glue:DeleteUserDefinedFunction',
'glue:GetCatalogImportStatus',
'glue:GetClassifier',
'glue:GetClassifiers',
'glue:GetConnection',
'glue:GetConnections',
'glue:GetCrawler',
'glue:GetCrawlerMetrics',
'glue:GetCrawlers',
'glue:GetDataCatalogEncryptionSettings',
'glue:GetDatabase',
'glue:GetDatabases',
'glue:GetDataflowGraph',
'glue:GetDevEndpoint',
'glue:GetDevEndpoints',
'glue:GetJob',
'glue:GetJobRun',
'glue:GetJobRuns',
'glue:GetJobs',
'glue:GetMapping',
'glue:GetPartition',
'glue:GetPartitions',
'glue:GetPlan',
'glue:GetResourcePolicy',
'glue:GetSecurityConfiguration',
'glue:GetSecurityConfigurations',
'glue:GetTable',
'glue:GetTableVersion',
'glue:GetTableVersions',
'glue:GetTables',
'glue:GetTags',
'glue:GetTrigger',
'glue:GetTriggers',
'glue:GetUserDefinedFunction',
'glue:GetUserDefinedFunctions',
'glue:ImportCatalogToGlue',
'glue:ListCrawlers',
'glue:ListDevEndpoints',
'glue:ListJobs',
'glue:ListTriggers',
'glue:PutDataCatalogEncryptionSettings',
'glue:PutResourcePolicy',
'glue:ResetJobBookmark',
'glue:StartCrawler',
'glue:StartCrawlerSchedule',
'glue:StartJobRun',
'glue:StartTrigger',
'glue:StopCrawler',
'glue:StopCrawlerSchedule',
'glue:StopTrigger',
'glue:TagResource',
'glue:UntagResource',
'glue:UpdateClassifier',
'glue:UpdateConnection',
'glue:UpdateCrawler',
'glue:UpdateDatabase',
'glue:UpdateDevEndpoint',
'glue:UpdateJob',
'glue:UpdatePartition',
'glue:UpdateTable',
'glue:UpdateTrigger',
'glue:UpdateUserDefinedFunction',
'greengrass:AssociateRoleToGroup',
'greengrass:AssociateServiceRoleToAccount',
'greengrass:CreateConnectorDefinition',
'greengrass:CreateConnectorDefinitionVersion',
'greengrass:CreateCoreDefinition',
'greengrass:CreateCoreDefinitionVersion',
'greengrass:CreateDeployment',
'greengrass:CreateDeviceDefinition',
'greengrass:CreateDeviceDefinitionVersion',
'greengrass:CreateFunctionDefinition',
'greengrass:CreateFunctionDefinitionVersion',
'greengrass:CreateGroup',
'greengrass:CreateGroupCertificateAuthority',
'greengrass:CreateGroupVersion',
'greengrass:CreateLoggerDefinition',
'greengrass:CreateLoggerDefinitionVersion',
'greengrass:CreateResourceDefinition',
'greengrass:CreateResourceDefinitionVersion',
'greengrass:CreateSoftwareUpdateJob',
'greengrass:CreateSubscriptionDefinition',
'greengrass:CreateSubscriptionDefinitionVersion',
'greengrass:DeleteConnectorDefinition',
'greengrass:DeleteCoreDefinition',
'greengrass:DeleteDeviceDefinition',
'greengrass:DeleteFunctionDefinition',
'greengrass:DeleteGroup',
'greengrass:DeleteLoggerDefinition',
'greengrass:DeleteResourceDefinition',
'greengrass:DeleteSubscriptionDefinition',
'greengrass:DisassociateRoleFromGroup',
'greengrass:DisassociateServiceRoleFromAccount',
'greengrass:GetAssociatedRole',
'greengrass:GetBulkDeploymentStatus',
'greengrass:GetConnectivityInfo',
'greengrass:GetConnectorDefinition',
'greengrass:GetConnectorDefinitionVersion',
'greengrass:GetCoreDefinition',
'greengrass:GetCoreDefinitionVersion',
'greengrass:GetDeploymentStatus',
'greengrass:GetDeviceDefinition',
'greengrass:GetDeviceDefinitionVersion',
'greengrass:GetFunctionDefinition',
'greengrass:GetFunctionDefinitionVersion',
'greengrass:GetGroup',
'greengrass:GetGroupCertificateAuthority',
'greengrass:GetGroupCertificateConfiguration',
'greengrass:GetGroupVersion',
'greengrass:GetLoggerDefinition',
'greengrass:GetLoggerDefinitionVersion',
'greengrass:GetResourceDefinition',
'greengrass:GetResourceDefinitionVersion',
'greengrass:GetServiceRoleForAccount',
'greengrass:GetSubscriptionDefinition',
'greengrass:GetSubscriptionDefinitionVersion',
'greengrass:ListBulkDeploymentDetailedReports',
'greengrass:ListBulkDeployments',
'greengrass:ListConnectorDefinitionVersions',
'greengrass:ListConnectorDefinitions',
'greengrass:ListCoreDefinitionVersions',
'greengrass:ListCoreDefinitions',
'greengrass:ListDeployments',
'greengrass:ListDeviceDefinitionVersions',
'greengrass:ListDeviceDefinitions',
'greengrass:ListFunctionDefinitionVersions',
'greengrass:ListFunctionDefinitions',
'greengrass:ListGroupCertificateAuthorities',
'greengrass:ListGroupVersions',
'greengrass:ListGroups',
'greengrass:ListLoggerDefinitionVersions',
'greengrass:ListLoggerDefinitions',
'greengrass:ListResourceDefinitionVersions',
'greengrass:ListResourceDefinitions',
'greengrass:ListSubscriptionDefinitionVersions',
'greengrass:ListSubscriptionDefinitions',
'greengrass:ListTagsForResource',
'greengrass:ResetDeployments',
'greengrass:StartBulkDeployment',
'greengrass:StopBulkDeployment',
'greengrass:TagResource',
'greengrass:UntagResource',
'greengrass:UpdateConnectivityInfo',
'greengrass:UpdateConnectorDefinition',
'greengrass:UpdateCoreDefinition',
'greengrass:UpdateDeviceDefinition',
'greengrass:UpdateFunctionDefinition',
'greengrass:UpdateGroup',
'greengrass:UpdateGroupCertificateConfiguration',
'greengrass:UpdateLoggerDefinition',
'greengrass:UpdateResourceDefinition',
'greengrass:UpdateSubscriptionDefinition',
'groundstation:CancelContact',
'groundstation:CreateConfig',
'groundstation:CreateDataflowEndpointGroup',
'groundstation:CreateMissionProfile',
'groundstation:DeleteConfig',
'groundstation:DeleteDataflowEndpointGroup',
'groundstation:DeleteMissionProfile',
'groundstation:DescribeContact',
'groundstation:GetConfig',
'groundstation:GetDataflowEndpointGroup',
'groundstation:GetMinuteUsage',
'groundstation:GetMissionProfile',
'groundstation:GetSatellite',
'groundstation:ListConfigs',
'groundstation:ListContacts',
'groundstation:ListDataflowEndpointGroups',
'groundstation:ListGroundStations',
'groundstation:ListMissionProfiles',
'groundstation:ListSatellites',
'groundstation:ListTagsForResource',
'groundstation:ReserveContact',
'groundstation:TagResource',
'groundstation:UntagResource',
'groundstation:UpdateConfig',
'groundstation:UpdateMissionProfile',
'groundtruthlabeling:DescribeConsoleJob',
'groundtruthlabeling:ListDatasetObjects',
'groundtruthlabeling:RunFilterOrSampleDatasetJob',
'groundtruthlabeling:RunGenerateManifestByCrawlingJob',
'guardduty:AcceptInvitation',
'guardduty:ArchiveFindings',
'guardduty:CreateDetector',
'guardduty:CreateIPSet',
'guardduty:CreateMembers',
'guardduty:CreateSampleFindings',
'guardduty:CreateThreatIntelSet',
'guardduty:DeclineInvitations',
'guardduty:DeleteDetector',
'guardduty:DeleteIPSet',
'guardduty:DeleteInvitations',
'guardduty:DeleteMembers',
'guardduty:DeleteThreatIntelSet',
'guardduty:DisassociateFromMasterAccount',
'guardduty:DisassociateMembers',
'guardduty:GetDetector',
'guardduty:GetFindings',
'guardduty:GetFindingsStatistics',
'guardduty:GetIPSet',
'guardduty:GetInvitationsCount',
'guardduty:GetMasterAccount',
'guardduty:GetMembers',
'guardduty:GetThreatIntelSet',
'guardduty:InviteMembers',
'guardduty:ListDetectors',
'guardduty:ListFindings',
'guardduty:ListIPSets',
'guardduty:ListInvitations',
'guardduty:ListMembers',
'guardduty:ListThreatIntelSets',
'guardduty:StartMonitoringMembers',
'guardduty:StopMonitoringMembers',
'guardduty:UnarchiveFindings',
'guardduty:UpdateDetector',
'guardduty:UpdateFindingsFeedback',
'guardduty:UpdateIPSet',
'guardduty:UpdateThreatIntelSet',
'health:DescribeAffectedEntities',
'health:DescribeEntityAggregates',
'health:DescribeEventAggregates',
'health:DescribeEventDetails',
'health:DescribeEventTypes',
'health:DescribeEvents',
'iam:AddClientIDToOpenIDConnectProvider',
'iam:AddRoleToInstanceProfile',
'iam:AddUserToGroup',
'iam:AttachGroupPolicy',
'iam:AttachRolePolicy',
'iam:AttachUserPolicy',
'iam:ChangePassword',
'iam:CreateAccessKey',
'iam:CreateAccountAlias',
'iam:CreateGroup',
'iam:CreateInstanceProfile',
'iam:CreateLoginProfile',
'iam:CreateOpenIDConnectProvider',
'iam:CreatePolicy',
'iam:CreatePolicyVersion',
'iam:CreateRole',
'iam:CreateSAMLProvider',
'iam:CreateServiceLinkedRole',
'iam:CreateServiceSpecificCredential',
'iam:CreateUser',
'iam:CreateVirtualMFADevice',
'iam:DeactivateMFADevice',
'iam:DeleteAccessKey',
'iam:DeleteAccountAlias',
'iam:DeleteAccountPasswordPolicy',
'iam:DeleteGroup',
'iam:DeleteGroupPolicy',
'iam:DeleteInstanceProfile',
'iam:DeleteLoginProfile',
'iam:DeleteOpenIDConnectProvider',
'iam:DeletePolicy',
'iam:DeletePolicyVersion',
'iam:DeleteRole',
'iam:DeleteRolePermissionsBoundary',
'iam:DeleteRolePolicy',
'iam:DeleteSAMLProvider',
'iam:DeleteSSHPublicKey',
'iam:DeleteServerCertificate',
'iam:DeleteServiceLinkedRole',
'iam:DeleteServiceSpecificCredential',
'iam:DeleteSigningCertificate',
'iam:DeleteUser',
'iam:DeleteUserPermissionsBoundary',
'iam:DeleteUserPolicy',
'iam:DeleteVirtualMFADevice',
'iam:DetachGroupPolicy',
'iam:DetachRolePolicy',
'iam:DetachUserPolicy',
'iam:EnableMFADevice',
'iam:GenerateCredentialReport',
'iam:GenerateOrganizationsAccessReport',
'iam:GenerateServiceLastAccessedDetails',
'iam:GetAccessKeyLastUsed',
'iam:GetAccountAuthorizationDetails',
'iam:GetAccountPasswordPolicy',
'iam:GetAccountSummary',
'iam:GetContextKeysForCustomPolicy',
'iam:GetContextKeysForPrincipalPolicy',
'iam:GetCredentialReport',
'iam:GetGroup',
'iam:GetGroupPolicy',
'iam:GetInstanceProfile',
'iam:GetLoginProfile',
'iam:GetOpenIDConnectProvider',
'iam:GetOrganizationsAccessReport',
'iam:GetPolicy',
'iam:GetPolicyVersion',
'iam:GetRole',
'iam:GetRolePolicy',
'iam:GetSAMLProvider',
'iam:GetSSHPublicKey',
'iam:GetServerCertificate',
'iam:GetServiceLastAccessedDetails',
'iam:GetServiceLastAccessedDetailsWithEntities',
'iam:GetServiceLinkedRoleDeletionStatus',
'iam:GetUser',
'iam:GetUserPolicy',
'iam:ListAccessKeys',
'iam:ListAccountAliases',
'iam:ListAttachedGroupPolicies',
'iam:ListAttachedRolePolicies',
'iam:ListAttachedUserPolicies',
'iam:ListEntitiesForPolicy',
'iam:ListGroupPolicies',
'iam:ListGroups',
'iam:ListGroupsForUser',
'iam:ListInstanceProfiles',
'iam:ListInstanceProfilesForRole',
'iam:ListMFADevices',
'iam:ListOpenIDConnectProviders',
'iam:ListPolicies',
'iam:ListPoliciesGrantingServiceAccess',
'iam:ListPolicyVersions',
'iam:ListRolePolicies',
'iam:ListRoleTags',
'iam:ListRoles',
'iam:ListSAMLProviders',
'iam:ListSSHPublicKeys',
'iam:ListServerCertificates',
'iam:ListServiceSpecificCredentials',
'iam:ListSigningCertificates',
'iam:ListUserPolicies',
'iam:ListUserTags',
'iam:ListUsers',
'iam:ListVirtualMFADevices',
'iam:PassRole[permission only]',
'iam:PutGroupPolicy',
'iam:PutRolePermissionsBoundary',
'iam:PutRolePolicy',
'iam:PutUserPermissionsBoundary',
'iam:PutUserPolicy',
'iam:RemoveClientIDFromOpenIDConnectProvider',
'iam:RemoveRoleFromInstanceProfile',
'iam:RemoveUserFromGroup',
'iam:ResetServiceSpecificCredential',
'iam:ResyncMFADevice',
'iam:SetDefaultPolicyVersion',
'iam:SetSecurityTokenServicePreferences',
'iam:SimulateCustomPolicy',
'iam:SimulatePrincipalPolicy',
'iam:TagRole',
'iam:TagUser',
'iam:UntagRole',
'iam:UntagUser',
'iam:UpdateAccessKey',
'iam:UpdateAccountPasswordPolicy',
'iam:UpdateAssumeRolePolicy',
'iam:UpdateGroup',
'iam:UpdateLoginProfile',
'iam:UpdateOpenIDConnectProviderThumbprint',
'iam:UpdateRole',
'iam:UpdateRoleDescription',
'iam:UpdateSAMLProvider',
'iam:UpdateSSHPublicKey',
'iam:UpdateServerCertificate',
'iam:UpdateServiceSpecificCredential',
'iam:UpdateSigningCertificate',
'iam:UpdateUser',
'iam:UploadSSHPublicKey',
'iam:UploadServerCertificate',
'iam:UploadSigningCertificate',
'importexport:CancelJob',
'importexport:CreateJob',
'importexport:GetShippingLabel',
'importexport:GetStatus',
'importexport:ListJobs',
'importexport:UpdateJob',
'inspector:AddAttributesToFindings',
'inspector:CreateAssessmentTarget',
'inspector:CreateAssessmentTemplate',
'inspector:CreateResourceGroup',
'inspector:DeleteAssessmentRun',
'inspector:DeleteAssessmentTarget',
'inspector:DeleteAssessmentTemplate',
'inspector:DescribeAssessmentRuns',
'inspector:DescribeAssessmentTargets',
'inspector:DescribeAssessmentTemplates',
'inspector:DescribeCrossAccountAccessRole',
'inspector:DescribeFindings',
'inspector:DescribeResourceGroups',
'inspector:DescribeRulesPackages',
'inspector:GetTelemetryMetadata',
'inspector:ListAssessmentRunAgents',
'inspector:ListAssessmentRuns',
'inspector:ListAssessmentTargets',
'inspector:ListAssessmentTemplates',
'inspector:ListEventSubscriptions',
'inspector:ListFindings',
'inspector:ListRulesPackages',
'inspector:ListTagsForResource',
'inspector:PreviewAgents',
'inspector:RegisterCrossAccountAccessRole',
'inspector:RemoveAttributesFromFindings',
'inspector:SetTagsForResource',
'inspector:StartAssessmentRun',
'inspector:StopAssessmentRun',
'inspector:SubscribeToEvent',
'inspector:UnsubscribeFromEvent',
'inspector:UpdateAssessmentTarget',
'iot:AcceptCertificateTransfer',
'iot:AddThingToBillingGroup',
'iot:AddThingToThingGroup',
'iot:AssociateTargetsWithJob',
'iot:AttachPolicy',
'iot:AttachPrincipalPolicy',
'iot:AttachSecurityProfile',
'iot:AttachThingPrincipal',
'iot:CancelAuditTask',
'iot:CancelCertificateTransfer',
'iot:CancelJob',
'iot:CancelJobExecution',
'iot:ClearDefaultAuthorizer',
'iot:Connect',
'iot:CreateAuthorizer',
'iot:CreateBillingGroup',
'iot:CreateCertificateFromCsr',
'iot:CreateDynamicThingGroup',
'iot:CreateJob',
'iot:CreateKeysAndCertificate',
'iot:CreateOTAUpdate',
'iot:CreatePolicy',
'iot:CreatePolicyVersion',
'iot:CreateRoleAlias',
'iot:CreateScheduledAudit',
'iot:CreateSecurityProfile',
'iot:CreateStream',
'iot:CreateThing',
'iot:CreateThingGroup',
'iot:CreateThingType',
'iot:CreateTopicRule',
'iot:DeleteAccountAuditConfiguration',
'iot:DeleteAuthorizer',
'iot:DeleteBillingGroup',
'iot:DeleteCACertificate',
'iot:DeleteCertificate',
'iot:DeleteDynamicThingGroup',
'iot:DeleteJob',
'iot:DeleteJobExecution',
'iot:DeleteOTAUpdate',
'iot:DeletePolicy',
'iot:DeletePolicyVersion',
'iot:DeleteRegistrationCode',
'iot:DeleteRoleAlias',
'iot:DeleteScheduledAudit',
'iot:DeleteSecurityProfile',
'iot:DeleteStream',
'iot:DeleteThing',
'iot:DeleteThingGroup',
'iot:DeleteThingShadow',
'iot:DeleteThingType',
'iot:DeleteTopicRule',
'iot:DeleteV2LoggingLevel',
'iot:DeprecateThingType',
'iot:DescribeAccountAuditConfiguration',
'iot:DescribeAuditTask',
'iot:DescribeAuthorizer',
'iot:DescribeBillingGroup',
'iot:DescribeCACertificate',
'iot:DescribeCertificate',
'iot:DescribeDefaultAuthorizer',
'iot:DescribeEndpoint',
'iot:DescribeEventConfigurations',
'iot:DescribeIndex',
'iot:DescribeJob',
'iot:DescribeJobExecution',
'iot:DescribeRoleAlias',
'iot:DescribeScheduledAudit',
'iot:DescribeSecurityProfile',
'iot:DescribeStream',
'iot:DescribeThing',
'iot:DescribeThingGroup',
'iot:DescribeThingRegistrationTask',
'iot:DescribeThingType',
'iot:DetachPolicy',
'iot:DetachPrincipalPolicy',
'iot:DetachSecurityProfile',
'iot:DetachThingPrincipal',
'iot:DisableTopicRule',
'iot:EnableTopicRule',
'iot:GetEffectivePolicies',
'iot:GetIndexingConfiguration',
'iot:GetJobDocument',
'iot:GetLoggingOptions',
'iot:GetOTAUpdate',
'iot:GetPendingJobExecutions',
'iot:GetPolicy',
'iot:GetPolicyVersion',
'iot:GetRegistrationCode',
'iot:GetStatistics',
'iot:GetThingShadow',
'iot:GetTopicRule',
'iot:GetV2LoggingOptions',
'iot:ListActiveViolations',
'iot:ListAttachedPolicies',
'iot:ListAuditFindings',
'iot:ListAuditTasks',
'iot:ListAuthorizers',
'iot:ListBillingGroups',
'iot:ListCACertificates',
'iot:ListCertificates',
'iot:ListCertificatesByCA',
'iot:ListIndices',
'iot:ListJobExecutionsForJob',
'iot:ListJobExecutionsForThing',
'iot:ListJobs',
'iot:ListOTAUpdates',
'iot:ListOutgoingCertificates',
'iot:ListPolicies',
'iot:ListPolicyPrincipals',
'iot:ListPolicyVersions',
'iot:ListPrincipalPolicies',
'iot:ListPrincipalThings',
'iot:ListRoleAliases',
'iot:ListScheduledAudits',
'iot:ListSecurityProfiles',
'iot:ListSecurityProfilesForTarget',
'iot:ListStreams',
'iot:ListTagsForResource',
'iot:ListTargetsForPolicy',
'iot:ListTargetsForSecurityProfile',
'iot:ListThingGroups',
'iot:ListThingGroupsForThing',
'iot:ListThingPrincipals',
'iot:ListThingRegistrationTaskReports',
'iot:ListThingRegistrationTasks',
'iot:ListThingTypes',
'iot:ListThings',
'iot:ListThingsInBillingGroup',
'iot:ListThingsInThingGroup',
'iot:ListTopicRules',
'iot:ListV2LoggingLevels',
'iot:ListViolationEvents',
'iot:Publish',
'iot:Receive',
'iot:RegisterCACertificate',
'iot:RegisterCertificate',
'iot:RegisterThing',
'iot:RejectCertificateTransfer',
'iot:RemoveThingFromBillingGroup',
'iot:RemoveThingFromThingGroup',
'iot:ReplaceTopicRule',
'iot:SearchIndex',
'iot:SetDefaultAuthorizer',
'iot:SetDefaultPolicyVersion',
'iot:SetLoggingOptions',
'iot:SetV2LoggingLevel',
'iot:SetV2LoggingOptions',
'iot:StartNextPendingJobExecution',
'iot:StartOnDemandAuditTask',
'iot:StartThingRegistrationTask',
'iot:StopThingRegistrationTask',
'iot:Subscribe',
'iot:TagResource',
'iot:TestAuthorization',
'iot:TestInvokeAuthorizer',
'iot:TransferCertificate',
'iot:UntagResource',
'iot:UpdateAccountAuditConfiguration',
'iot:UpdateAuthorizer',
'iot:UpdateBillingGroup',
'iot:UpdateCACertificate',
'iot:UpdateCertificate',
'iot:UpdateDynamicThingGroup',
'iot:UpdateEventConfigurations',
'iot:UpdateIndexingConfiguration',
'iot:UpdateJob',
'iot:UpdateJobExecution',
'iot:UpdateRoleAlias',
'iot:UpdateScheduledAudit',
'iot:UpdateSecurityProfile',
'iot:UpdateStream',
'iot:UpdateThing',
'iot:UpdateThingGroup',
'iot:UpdateThingGroupsForThing',
'iot:UpdateThingShadow',
'iot:ValidateSecurityProfileBehaviors',
'iot1click:AssociateDeviceWithPlacement',
'iot1click:ClaimDevicesByClaimCode',
'iot1click:CreatePlacement',
'iot1click:CreateProject',
'iot1click:DeletePlacement',
'iot1click:DeleteProject',
'iot1click:DescribeDevice',
'iot1click:DescribePlacement',
'iot1click:DescribeProject',
'iot1click:DisassociateDeviceFromPlacement',
'iot1click:FinalizeDeviceClaim',
'iot1click:GetDeviceMethods',
'iot1click:GetDevicesInPlacement',
'iot1click:InitiateDeviceClaim',
'iot1click:InvokeDeviceMethod',
'iot1click:ListDeviceEvents',
'iot1click:ListDevices',
'iot1click:ListPlacements',
'iot1click:ListProjects',
'iot1click:ListTagsForResource',
'iot1click:TagResource',
'iot1click:UnclaimDevice',
'iot1click:UntagResource',
'iot1click:UpdateDeviceState',
'iot1click:UpdatePlacement',
'iot1click:UpdateProject',
'iotanalytics:BatchPutMessage',
'iotanalytics:CancelPipelineReprocessing',
'iotanalytics:CreateChannel',
'iotanalytics:CreateDataset',
'iotanalytics:CreateDatasetContent',
'iotanalytics:CreateDatastore',
'iotanalytics:CreatePipeline',
'iotanalytics:DeleteChannel',
'iotanalytics:DeleteDataset',
'iotanalytics:DeleteDatasetContent',
'iotanalytics:DeleteDatastore',
'iotanalytics:DeletePipeline',
'iotanalytics:DescribeChannel',
'iotanalytics:DescribeDataset',
'iotanalytics:DescribeDatastore',
'iotanalytics:DescribeLoggingOptions',
'iotanalytics:DescribePipeline',
'iotanalytics:GetDatasetContent',
'iotanalytics:ListChannels',
'iotanalytics:ListDatasets',
'iotanalytics:ListDatastores',
'iotanalytics:ListPipelines',
'iotanalytics:ListTagsForResource',
'iotanalytics:PutLoggingOptions',
'iotanalytics:RunPipelineActivity',
'iotanalytics:SampleChannelData',
'iotanalytics:StartPipelineReprocessing',
'iotanalytics:TagResource',
'iotanalytics:UntagResource',
'iotanalytics:UpdateChannel',
'iotanalytics:UpdateDataset',
'iotanalytics:UpdateDatastore',
'iotanalytics:UpdatePipeline',
'iotevents:BatchPutMessage',
'iotevents:BatchUpdateDetector',
'iotevents:CreateDetectorModel',
'iotevents:CreateInput',
'iotevents:DeleteDetectorModel',
'iotevents:DeleteInput',
'iotevents:DescribeDetector',
'iotevents:DescribeDetectorModel',
'iotevents:DescribeInput',
'iotevents:DescribeLoggingOptions',
'iotevents:ListDetectorModelVersions',
'iotevents:ListDetectorModels',
'iotevents:ListDetectors',
'iotevents:ListInputs',
'iotevents:ListTagsForResource',
'iotevents:PutLoggingOptions',
'iotevents:TagResource',
'iotevents:UntagResource',
'iotevents:UpdateDetectorModel',
'iotevents:UpdateInput',
'iotevents:UpdateInputRouting',
'iotsitewise:AssociateGatewaySink',
'iotsitewise:AssociateGatewaySource',
'iotsitewise:AssociateViewEntities',
'iotsitewise:CreateAsset',
'iotsitewise:CreateAssetTemplate',
'iotsitewise:CreateGateway',
'iotsitewise:CreateGroup',
'iotsitewise:CreateMeasurementDataStore',
'iotsitewise:CreateMetricType',
'iotsitewise:CreateView',
'iotsitewise:DeleteAsset',
'iotsitewise:DeleteAssetTemplate',
'iotsitewise:DeleteGateway',
'iotsitewise:DeleteGroup',
'iotsitewise:DeleteMeasurementDataStore',
'iotsitewise:DeleteMetricType',
'iotsitewise:DeleteView',
'iotsitewise:DeregisterViewEntities',
'iotsitewise:DescribeAssetTemplates',
'iotsitewise:DescribeAssets',
'iotsitewise:DescribeGateways',
'iotsitewise:DescribeGroups',
'iotsitewise:DescribeMeasurementDataStores',
'iotsitewise:DescribeMetricTypes',
'iotsitewise:DescribeViews',
'iotsitewise:DisassociateGatewaySink',
'iotsitewise:DisassociateGatewaySource',
'iotsitewise:DisassociateViewEntities',
'iotsitewise:GetMeasurementData',
'iotsitewise:GetMetricData',
'iotsitewise:ListAssetTemplates',
'iotsitewise:ListAssets',
'iotsitewise:ListGateways',
'iotsitewise:ListGroups',
'iotsitewise:ListMeasurementDataStores',
'iotsitewise:ListMeasurementDataStreams',
'iotsitewise:ListMetricTypes',
'iotsitewise:ListViewEntities',
'iotsitewise:ListViews',
'iotsitewise:RegisterViewEntities',
'iotsitewise:UpdateAsset',
'iotsitewise:UpdateAssetTemplate',
'iotsitewise:UpdateGateway',
'iotsitewise:UpdateGroup',
'iotsitewise:UpdateMeasurementDataStore',
'iotsitewise:UpdateView',
'kms:CancelKeyDeletion',
'kms:ConnectCustomKeyStore',
'kms:CreateAlias',
'kms:CreateCustomKeyStore',
'kms:CreateGrant',
'kms:CreateKey',
'kms:Decrypt',
'kms:DeleteAlias',
'kms:DeleteCustomKeyStore',
'kms:DeleteImportedKeyMaterial',
'kms:DescribeCustomKeyStores',
'kms:DescribeKey',
'kms:DisableKey',
'kms:DisableKeyRotation',
'kms:DisconnectCustomKeyStore',
'kms:EnableKey',
'kms:EnableKeyRotation',
'kms:Encrypt',
'kms:GenerateDataKey',
'kms:GenerateDataKeyWithoutPlaintext',
'kms:GenerateRandom',
'kms:GetKeyPolicy',
'kms:GetKeyRotationStatus',
'kms:GetParametersForImport',
'kms:ImportKeyMaterial',
'kms:ListAliases',
'kms:ListGrants',
'kms:ListKeyPolicies',
'kms:ListKeys',
'kms:ListResourceTags',
'kms:ListRetirableGrants',
'kms:PutKeyPolicy',
'kms:ReEncryptFrom',
'kms:ReEncryptTo',
'kms:RetireGrant',
'kms:RevokeGrant',
'kms:ScheduleKeyDeletion',
'kms:TagResource',
'kms:UntagResource',
'kms:UpdateAlias',
'kms:UpdateCustomKeyStore',
'kms:UpdateKeyDescription',
'kinesis:AddTagsToStream',
'kinesis:CreateStream',
'kinesis:DecreaseStreamRetentionPeriod',
'kinesis:DeleteStream',
'kinesis:DeregisterStreamConsumer',
'kinesis:DescribeLimits',
'kinesis:DescribeStream',
'kinesis:DescribeStreamConsumer',
'kinesis:DescribeStreamSummary',
'kinesis:DisableEnhancedMonitoring',
'kinesis:EnableEnhancedMonitoring',
'kinesis:GetRecords',
'kinesis:GetShardIterator',
'kinesis:IncreaseStreamRetentionPeriod',
'kinesis:ListShards',
'kinesis:ListStreamConsumers',
'kinesis:ListStreams',
'kinesis:ListTagsForStream',
'kinesis:MergeShards',
'kinesis:PutRecord',
'kinesis:PutRecords',
'kinesis:RegisterStreamConsumer',
'kinesis:RemoveTagsFromStream',
'kinesis:SplitShard',
'kinesis:SubscribeToShard',
'kinesis:UpdateShardCount',
'kinesisanalytics:AddApplicationInput',
'kinesisanalytics:AddApplicationOutput',
'kinesisanalytics:AddApplicationReferenceDataSource',
'kinesisanalytics:CreateApplication',
'kinesisanalytics:DeleteApplication',
'kinesisanalytics:DeleteApplicationOutput',
'kinesisanalytics:DeleteApplicationReferenceDataSource',
'kinesisanalytics:DescribeApplication',
'kinesisanalytics:DiscoverInputSchema',
'kinesisanalytics:ListApplications',
'kinesisanalytics:ListTagsForResource',
'kinesisanalytics:StartApplication',
'kinesisanalytics:StopApplication',
'kinesisanalytics:TagResource',
'kinesisanalytics:UntagResource',
'kinesisanalytics:UpdateApplication',
'kinesisanalytics:AddApplicationCloudWatchLoggingOption',
'kinesisanalytics:AddApplicationInput',
'kinesisanalytics:AddApplicationInputProcessingConfiguration',
'kinesisanalytics:AddApplicationOutput',
'kinesisanalytics:AddApplicationReferenceDataSource',
'kinesisanalytics:CreateApplication',
'kinesisanalytics:CreateApplicationSnapshot',
'kinesisanalytics:DeleteApplication',
'kinesisanalytics:DeleteApplicationCloudWatchLoggingOption',
'kinesisanalytics:DeleteApplicationInputProcessingConfiguration',
'kinesisanalytics:DeleteApplicationOutput',
'kinesisanalytics:DeleteApplicationReferenceDataSource',
'kinesisanalytics:DeleteApplicationSnapshot',
'kinesisanalytics:DescribeApplication',
'kinesisanalytics:DescribeApplicationSnapshot',
'kinesisanalytics:DiscoverInputSchema',
'kinesisanalytics:ListApplicationSnapshots',
'kinesisanalytics:ListApplications',
'kinesisanalytics:ListTagsForResource',
'kinesisanalytics:StartApplication',
'kinesisanalytics:StopApplication',
'kinesisanalytics:TagResource',
'kinesisanalytics:UntagResource',
'kinesisanalytics:UpdateApplication',
'firehose:CreateDeliveryStream',
'firehose:DeleteDeliveryStream',
'firehose:DescribeDeliveryStream',
'firehose:ListDeliveryStreams',
'firehose:ListTagsForDeliveryStream',
'firehose:PutRecord',
'firehose:PutRecordBatch',
'firehose:StartDeliveryStreamEncryption',
'firehose:StopDeliveryStreamEncryption',
'firehose:TagDeliveryStream',
'firehose:UntagDeliveryStream',
'firehose:UpdateDestination',
'kinesisvideo:CreateStream',
'kinesisvideo:DeleteStream',
'kinesisvideo:DescribeStream',
'kinesisvideo:GetDataEndpoint',
'kinesisvideo:GetHLSStreamingSessionURL',
'kinesisvideo:GetMedia',
'kinesisvideo:GetMediaForFragmentList',
'kinesisvideo:ListFragments',
'kinesisvideo:ListStreams',
'kinesisvideo:ListTagsForStream',
'kinesisvideo:PutMedia',
'kinesisvideo:TagStream',
'kinesisvideo:UntagStream',
'kinesisvideo:UpdateDataRetention',
'kinesisvideo:UpdateStream',
'lambda:AddLayerVersionPermission',
'lambda:AddPermission',
'lambda:CreateAlias',
'lambda:CreateEventSourceMapping',
'lambda:CreateFunction',
'lambda:DeleteAlias',
'lambda:DeleteEventSourceMapping',
'lambda:DeleteFunction',
'lambda:DeleteFunctionConcurrency',
'lambda:DeleteLayerVersion',
'lambda:EnableReplication',
'lambda:GetAccountSettings',
'lambda:GetAlias',
'lambda:GetEventSourceMapping',
'lambda:GetFunction',
'lambda:GetFunctionConfiguration',
'lambda:GetLayerVersion',
'lambda:GetLayerVersionPolicy',
'lambda:GetPolicy',
'lambda:InvokeAsync',
'lambda:InvokeFunction[permission only]',
'lambda:ListAliases',
'lambda:ListEventSourceMappings',
'lambda:ListFunctions',
'lambda:ListLayerVersions',
'lambda:ListLayers',
'lambda:ListTags',
'lambda:ListVersionsByFunction',
'lambda:PublishLayerVersion',
'lambda:PublishVersion',
'lambda:PutFunctionConcurrency',
'lambda:RemoveLayerVersionPermission',
'lambda:RemovePermission',
'lambda:TagResource',
'lambda:UntagResource',
'lambda:UpdateAlias',
'lambda:UpdateEventSourceMapping',
'lambda:UpdateFunctionCode',
'lambda:UpdateFunctionConfiguration',
'lex:CreateBotVersion',
'lex:CreateIntentVersion',
'lex:CreateSlotTypeVersion',
'lex:DeleteBot',
'lex:DeleteBotAlias',
'lex:DeleteBotChannelAssociation',
'lex:DeleteBotVersion',
'lex:DeleteIntent',
'lex:DeleteIntentVersion',
'lex:DeleteSlotType',
'lex:DeleteSlotTypeVersion',
'lex:DeleteUtterances',
'lex:GetBot',
'lex:GetBotAlias',
'lex:GetBotAliases',
'lex:GetBotChannelAssociation',
'lex:GetBotChannelAssociations',
'lex:GetBotVersions',
'lex:GetBots',
'lex:GetBuiltinIntent',
'lex:GetBuiltinIntents',
'lex:GetBuiltinSlotTypes',
'lex:GetIntent',
'lex:GetIntentVersions',
'lex:GetIntents',
'lex:GetSlotType',
'lex:GetSlotTypeVersions',
'lex:GetSlotTypes',
'lex:GetUtterancesView',
'lex:PostContent',
'lex:PostText',
'lex:PutBot',
'lex:PutBotAlias',
'lex:PutIntent',
'lex:PutSlotType',
'license-manager:CreateLicenseConfiguration',
'license-manager:DeleteLicenseConfiguration',
'license-manager:GetLicenseConfiguration',
'license-manager:GetServiceSettings',
'license-manager:ListAssociationsForLicenseConfiguration',
'license-manager:ListLicenseConfigurations',
'license-manager:ListLicenseSpecificationsForResource',
'license-manager:ListResourceInventory',
'license-manager:ListTagsForResource',
'license-manager:ListUsageForLicenseConfiguration',
'license-manager:TagResource',
'license-manager:UntagResource',
'license-manager:UpdateLicenseConfiguration',
'license-manager:UpdateLicenseSpecificationsForResource',
'license-manager:UpdateServiceSettings',
'lightsail:AllocateStaticIp',
'lightsail:AttachDisk',
'lightsail:AttachInstancesToLoadBalancer',
'lightsail:AttachLoadBalancerTlsCertificate',
'lightsail:AttachStaticIp',
'lightsail:CloseInstancePublicPorts',
'lightsail:CopySnapshot',
'lightsail:CreateCloudFormationStack',
'lightsail:CreateDisk',
'lightsail:CreateDiskFromSnapshot',
'lightsail:CreateDiskSnapshot',
'lightsail:CreateDomain',
'lightsail:CreateDomainEntry',
'lightsail:CreateInstanceSnapshot',
'lightsail:CreateInstances',
'lightsail:CreateInstancesFromSnapshot',
'lightsail:CreateKeyPair',
'lightsail:CreateLoadBalancer',
'lightsail:CreateLoadBalancerTlsCertificate',
'lightsail:CreateRelationalDatabase',
'lightsail:CreateRelationalDatabaseFromSnapshot',
'lightsail:CreateRelationalDatabaseSnapshot',
'lightsail:DeleteDisk',
'lightsail:DeleteDiskSnapshot',
'lightsail:DeleteDomain',
'lightsail:DeleteDomainEntry',
'lightsail:DeleteInstance',
'lightsail:DeleteInstanceSnapshot',
'lightsail:DeleteKeyPair',
'lightsail:DeleteKnownHostKeys',
'lightsail:DeleteLoadBalancer',
'lightsail:DeleteLoadBalancerTlsCertificate',
'lightsail:DeleteRelationalDatabase',
'lightsail:DeleteRelationalDatabaseSnapshot',
'lightsail:DetachDisk',
'lightsail:DetachInstancesFromLoadBalancer',
'lightsail:DetachStaticIp',
'lightsail:DownloadDefaultKeyPair',
'lightsail:ExportSnapshot',
'lightsail:GetActiveNames',
'lightsail:GetBlueprints',
'lightsail:GetBundles',
'lightsail:GetCloudFormationStackRecords',
'lightsail:GetDisk',
'lightsail:GetDiskSnapshot',
'lightsail:GetDiskSnapshots',
'lightsail:GetDisks',
'lightsail:GetDomain',
'lightsail:GetDomains',
'lightsail:GetExportSnapshotRecords',
'lightsail:GetInstance',
'lightsail:GetInstanceAccessDetails',
'lightsail:GetInstanceMetricData',
'lightsail:GetInstancePortStates',
'lightsail:GetInstanceSnapshot',
'lightsail:GetInstanceSnapshots',
'lightsail:GetInstanceState',
'lightsail:GetInstances',
'lightsail:GetKeyPair',
'lightsail:GetKeyPairs',
'lightsail:GetLoadBalancer',
'lightsail:GetLoadBalancerMetricData',
'lightsail:GetLoadBalancerTlsCertificates',
'lightsail:GetLoadBalancers',
'lightsail:GetOperation',
'lightsail:GetOperations',
'lightsail:GetOperationsForResource',
'lightsail:GetRegions',
'lightsail:GetRelationalDatabase',
'lightsail:GetRelationalDatabaseBlueprints',
'lightsail:GetRelationalDatabaseBundles',
'lightsail:GetRelationalDatabaseEvents',
'lightsail:GetRelationalDatabaseLogEvents',
'lightsail:GetRelationalDatabaseLogStreams',
'lightsail:GetRelationalDatabaseMasterUserPassword',
'lightsail:GetRelationalDatabaseMetricData',
'lightsail:GetRelationalDatabaseParameters',
'lightsail:GetRelationalDatabaseSnapshot',
'lightsail:GetRelationalDatabaseSnapshots',
'lightsail:GetRelationalDatabases',
'lightsail:GetStaticIp',
'lightsail:GetStaticIps',
'lightsail:ImportKeyPair',
'lightsail:IsVpcPeered',
'lightsail:OpenInstancePublicPorts',
'lightsail:PeerVpc',
'lightsail:PutInstancePublicPorts',
'lightsail:RebootInstance',
'lightsail:RebootRelationalDatabase',
'lightsail:ReleaseStaticIp',
'lightsail:StartInstance',
'lightsail:StartRelationalDatabase',
'lightsail:StopInstance',
'lightsail:StopRelationalDatabase',
'lightsail:TagResource',
'lightsail:UnpeerVpc',
'lightsail:UntagResource',
'lightsail:UpdateDomainEntry',
'lightsail:UpdateLoadBalancerAttribute',
'lightsail:UpdateRelationalDatabase',
'lightsail:UpdateRelationalDatabaseParameters',
'machinelearning:AddTags',
'machinelearning:CreateBatchPrediction',
'machinelearning:CreateDataSourceFromRDS',
'machinelearning:CreateDataSourceFromRedshift',
'machinelearning:CreateDataSourceFromS3',
'machinelearning:CreateEvaluation',
'machinelearning:CreateMLModel',
'machinelearning:CreateRealtimeEndpoint',
'machinelearning:DeleteBatchPrediction',
'machinelearning:DeleteDataSource',
'machinelearning:DeleteEvaluation',
'machinelearning:DeleteMLModel',
'machinelearning:DeleteRealtimeEndpoint',
'machinelearning:DeleteTags',
'machinelearning:DescribeBatchPredictions',
'machinelearning:DescribeDataSources',
'machinelearning:DescribeEvaluations',
'machinelearning:DescribeMLModels',
'machinelearning:DescribeTags',
'machinelearning:GetBatchPrediction',
'machinelearning:GetDataSource',
'machinelearning:GetEvaluation',
'machinelearning:GetMLModel',
'machinelearning:Predict',
'machinelearning:UpdateBatchPrediction',
'machinelearning:UpdateDataSource',
'machinelearning:UpdateEvaluation',
'machinelearning:UpdateMLModel',
'macie:AssociateMemberAccount',
'macie:AssociateS3Resources',
'macie:DisassociateMemberAccount',
'macie:DisassociateS3Resources',
'macie:ListMemberAccounts',
'macie:ListS3Resources',
'macie:UpdateS3Resources',
'apigateway:DELETE',
'apigateway:GET',
'apigateway:PATCH',
'apigateway:POST',
'apigateway:PUT',
'apigateway:UpdateRestApiPolicy',
'managedblockchain:CreateMember',
'managedblockchain:CreateNetwork',
'managedblockchain:CreateNode',
'managedblockchain:CreateProposal',
'managedblockchain:DeleteMember',
'managedblockchain:DeleteNode',
'managedblockchain:GetMember',
'managedblockchain:GetNetwork',
'managedblockchain:GetNode',
'managedblockchain:GetProposal',
'managedblockchain:ListInvitations',
'managedblockchain:ListMembers',
'managedblockchain:ListNetworks',
'managedblockchain:ListNodes',
'managedblockchain:ListProposalVotes',
'managedblockchain:ListProposals',
'managedblockchain:RejectInvitation',
'managedblockchain:VoteOnProposal',
'kafka:CreateCluster',
'kafka:CreateConfiguration',
'kafka:DeleteCluster',
'kafka:DescribeCluster',
'kafka:DescribeClusterOperation',
'kafka:DescribeConfiguration',
'kafka:DescribeConfigurationRevision',
'kafka:GetBootstrapBrokers',
'kafka:ListClusterOperations',
'kafka:ListClusters',
'kafka:ListConfigurations',
'kafka:ListNodes',
'kafka:ListTagsForResource',
'kafka:TagResource',
'kafka:UntagResource',
'kafka:UpdateBrokerStorage',
'kafka:UpdateClusterConfiguration',
'aws-marketplace:Subscribe',
'aws-marketplace:Unsubscribe',
'aws-marketplace:ViewSubscriptions',
'aws-marketplace-management:uploadFiles',
'aws-marketplace-management:viewMarketing',
'aws-marketplace-management:viewReports',
'aws-marketplace-management:viewSettings',
'aws-marketplace-management:viewSupport',
'aws-marketplace:BatchMeterUsage',
'aws-marketplace:MeterUsage',
'aws-marketplace:RegisterUsage',
'aws-marketplace:ResolveCustomer',
'aws-marketplace:DescribeProcurementSystemConfiguration[permission only]',
'aws-marketplace:PutProcurementSystemConfiguration[permission only]',
'mechanicalturk:ApproveAssignment',
'mechanicalturk:ApproveRejectedAssignment',
'mechanicalturk:AssignQualification',
'mechanicalturk:BlockWorker',
'mechanicalturk:ChangeHITTypeOfHIT',
'mechanicalturk:CreateHIT',
'mechanicalturk:CreateQualificationType',
'mechanicalturk:DisableHIT',
'mechanicalturk:DisposeHIT',
'mechanicalturk:DisposeQualificationType',
'mechanicalturk:ExtendHIT',
'mechanicalturk:ForceExpireHIT',
'mechanicalturk:GetAccountBalance',
'mechanicalturk:GetAssignment',
'mechanicalturk:GetAssignmentsForHIT',
'mechanicalturk:GetBlockedWorkers',
'mechanicalturk:GetBonusPayments',
'mechanicalturk:GetFileUploadURL',
'mechanicalturk:GetHIT',
'mechanicalturk:GetHITsForQualificationType',
'mechanicalturk:GetQualificationRequests',
'mechanicalturk:GetQualificationScore',
'mechanicalturk:GetQualificationType',
'mechanicalturk:GetQualificationsForQualificationType',
'mechanicalturk:GetRequesterStatistic',
'mechanicalturk:GetRequesterWorkerStatistic',
'mechanicalturk:GetReviewResultsForHIT',
'mechanicalturk:GetReviewableHITs',
'mechanicalturk:GrantBonus',
'mechanicalturk:GrantQualification',
'mechanicalturk:NotifyWorkers',
'mechanicalturk:RegisterHITType',
'mechanicalturk:RejectAssignment',
'mechanicalturk:RejectQualificationRequest',
'mechanicalturk:RevokeQualification',
'mechanicalturk:SearchHITs',
'mechanicalturk:SearchQualificationTypes',
'mechanicalturk:SendTestEventNotification',
'mechanicalturk:SetHITAsReviewing',
'mechanicalturk:SetHITTypeNotification',
'mechanicalturk:UnblockWorker',
'mechanicalturk:UpdateQualificationScore',
'mechanicalturk:UpdateQualificationType',
'ec2messages:AcknowledgeMessage',
'ec2messages:DeleteMessage',
'ec2messages:FailMessage',
'ec2messages:GetEndpoint',
'ec2messages:GetMessages',
'ec2messages:SendReply',
'mgh:AssociateCreatedArtifact',
'mgh:AssociateDiscoveredResource',
'mgh:CreateProgressUpdateStream',
'mgh:DeleteProgressUpdateStream',
'mgh:DescribeApplicationState',
'mgh:DescribeMigrationTask',
'mgh:DisassociateCreatedArtifact',
'mgh:DisassociateDiscoveredResource',
'mgh:ImportMigrationTask',
'mgh:ListCreatedArtifacts',
'mgh:ListDiscoveredResources',
'mgh:ListMigrationTasks',
'mgh:ListProgressUpdateStreams',
'mgh:NotifyApplicationState',
'mgh:NotifyMigrationTaskState',
'mgh:PutResourceAttributes',
'mobileanalytics:GetFinancialReports',
'mobileanalytics:GetReports',
'mobileanalytics:PutEvents',
'mobilehub:CreateProject',
'mobilehub:CreateServiceRole',
'mobilehub:DeleteProject',
'mobilehub:DeleteProjectSnapshot',
'mobilehub:DeployToStage',
'mobilehub:DescribeBundle',
'mobilehub:ExportBundle',
'mobilehub:ExportProject',
'mobilehub:GenerateProjectParameters',
'mobilehub:GetProject',
'mobilehub:GetProjectSnapshot',
'mobilehub:ImportProject',
'mobilehub:InstallBundle',
'mobilehub:ListAvailableConnectors',
'mobilehub:ListAvailableFeatures',
'mobilehub:ListAvailableRegions',
'mobilehub:ListBundles',
'mobilehub:ListProjectSnapshots',
'mobilehub:ListProjects',
'mobilehub:SynchronizeProject',
'mobilehub:UpdateProject',
'mobilehub:VerifyServiceRole',
'mq:CreateBroker',
'mq:CreateConfiguration',
'mq:CreateTags',
'mq:CreateUser',
'mq:DeleteBroker',
'mq:DeleteTags',
'mq:DeleteUser',
'mq:DescribeBroker',
'mq:DescribeBrokerEngineTypes',
'mq:DescribeBrokerInstanceOptions',
'mq:DescribeConfiguration',
'mq:DescribeConfigurationRevision',
'mq:DescribeUser',
'mq:ListBrokers',
'mq:ListConfigurationRevisions',
'mq:ListConfigurations',
'mq:ListTags',
'mq:ListUsers',
'mq:RebootBroker',
'mq:UpdateBroker',
'mq:UpdateConfiguration',
'mq:UpdateUser',
'neptune-db:connect',
'opsworks:AssignInstance',
'opsworks:AssignVolume',
'opsworks:AssociateElasticIp',
'opsworks:AttachElasticLoadBalancer',
'opsworks:CloneStack',
'opsworks:CreateApp',
'opsworks:CreateDeployment',
'opsworks:CreateInstance',
'opsworks:CreateLayer',
'opsworks:CreateStack',
'opsworks:CreateUserProfile',
'opsworks:DeleteApp',
'opsworks:DeleteInstance',
'opsworks:DeleteLayer',
'opsworks:DeleteStack',
'opsworks:DeleteUserProfile',
'opsworks:DeregisterEcsCluster',
'opsworks:DeregisterElasticIp',
'opsworks:DeregisterInstance',
'opsworks:DeregisterRdsDbInstance',
'opsworks:DeregisterVolume',
'opsworks:DescribeAgentVersions',
'opsworks:DescribeApps',
'opsworks:DescribeCommands',
'opsworks:DescribeDeployments',
'opsworks:DescribeEcsClusters',
'opsworks:DescribeElasticIps',
'opsworks:DescribeElasticLoadBalancers',
'opsworks:DescribeInstances',
'opsworks:DescribeLayers',
'opsworks:DescribeLoadBasedAutoScaling',
'opsworks:DescribeMyUserProfile',
'opsworks:DescribePermissions',
'opsworks:DescribeRaidArrays',
'opsworks:DescribeRdsDbInstances',
'opsworks:DescribeServiceErrors',
'opsworks:DescribeStackProvisioningParameters',
'opsworks:DescribeStackSummary',
'opsworks:DescribeStacks',
'opsworks:DescribeTimeBasedAutoScaling',
'opsworks:DescribeUserProfiles',
'opsworks:DescribeVolumes',
'opsworks:DetachElasticLoadBalancer',
'opsworks:DisassociateElasticIp',
'opsworks:GetHostnameSuggestion',
'opsworks:GrantAccess',
'opsworks:ListTags',
'opsworks:RebootInstance',
'opsworks:RegisterEcsCluster',
'opsworks:RegisterElasticIp',
'opsworks:RegisterInstance',
'opsworks:RegisterRdsDbInstance',
'opsworks:RegisterVolume',
'opsworks:SetLoadBasedAutoScaling',
'opsworks:SetPermission',
'opsworks:SetTimeBasedAutoScaling',
'opsworks:StartInstance',
'opsworks:StartStack',
'opsworks:StopInstance',
'opsworks:StopStack',
'opsworks:TagResource',
'opsworks:UnassignInstance',
'opsworks:UnassignVolume',
'opsworks:UntagResource',
'opsworks:UpdateApp',
'opsworks:UpdateElasticIp',
'opsworks:UpdateInstance',
'opsworks:UpdateLayer',
'opsworks:UpdateMyUserProfile',
'opsworks:UpdateRdsDbInstance',
'opsworks:UpdateStack',
'opsworks:UpdateUserProfile',
'opsworks:UpdateVolume',
'opsworks-cm:AssociateNode',
'opsworks-cm:CreateBackup',
'opsworks-cm:CreateServer',
'opsworks-cm:DeleteBackup',
'opsworks-cm:DeleteServer',
'opsworks-cm:DescribeAccountAttributes',
'opsworks-cm:DescribeBackups',
'opsworks-cm:DescribeEvents',
'opsworks-cm:DescribeNodeAssociationStatus',
'opsworks-cm:DescribeServers',
'opsworks-cm:DisassociateNode',
'opsworks-cm:RestoreServer',
'opsworks-cm:StartMaintenance',
'opsworks-cm:UpdateServer',
'opsworks-cm:UpdateServerEngineAttributes',
'organizations:AcceptHandshake',
'organizations:AttachPolicy',
'organizations:CancelHandshake',
'organizations:CreateAccount',
'organizations:CreateGovCloudAccount',
'organizations:CreateOrganization',
'organizations:CreateOrganizationalUnit',
'organizations:CreatePolicy',
'organizations:DeclineHandshake',
'organizations:DeleteOrganization',
'organizations:DeleteOrganizationalUnit',
'organizations:DeletePolicy',
'organizations:DescribeAccount',
'organizations:DescribeCreateAccountStatus',
'organizations:DescribeHandshake',
'organizations:DescribeOrganization',
'organizations:DescribeOrganizationalUnit',
'organizations:DescribePolicy',
'organizations:DetachPolicy',
'organizations:DisableAWSServiceAccess',
'organizations:DisablePolicyType',
'organizations:EnableAWSServiceAccess',
'organizations:EnableAllFeatures',
'organizations:EnablePolicyType',
'organizations:InviteAccountToOrganization',
'organizations:LeaveOrganization',
'organizations:ListAWSServiceAccessForOrganization',
'organizations:ListAccounts',
'organizations:ListAccountsForParent',
'organizations:ListChildren',
'organizations:ListCreateAccountStatus',
'organizations:ListHandshakesForAccount',
'organizations:ListHandshakesForOrganization',
'organizations:ListOrganizationalUnitsForParent',
'organizations:ListParents',
'organizations:ListPolicies',
'organizations:ListPoliciesForTarget',
'organizations:ListRoots',
'organizations:ListTagsForResource',
'organizations:ListTargetsForPolicy',
'organizations:MoveAccount',
'organizations:RemoveAccountFromOrganization',
'organizations:TagResource',
'organizations:UntagResource',
'organizations:UpdateOrganizationalUnit',
'organizations:UpdatePolicy',
'pi:DescribeDimensionKeys',
'pi:GetResourceMetrics',
'personalize:CreateCampaign',
'personalize:CreateDataset',
'personalize:CreateDatasetGroup',
'personalize:CreateDatasetImportJob',
'personalize:CreateEventTracker',
'personalize:CreateSchema',
'personalize:CreateSolution',
'personalize:CreateSolutionVersion',
'personalize:DeleteCampaign',
'personalize:DeleteDataset',
'personalize:DeleteDatasetGroup',
'personalize:DeleteEventTracker',
'personalize:DeleteSchema',
'personalize:DeleteSolution',
'personalize:DescribeAlgorithm',
'personalize:DescribeCampaign',
'personalize:DescribeDataset',
'personalize:DescribeDatasetGroup',
'personalize:DescribeDatasetImportJob',
'personalize:DescribeEventTracker',
'personalize:DescribeFeatureTransformation',
'personalize:DescribeRecipe',
'personalize:DescribeSchema',
'personalize:DescribeSolution',
'personalize:DescribeSolutionVersion',
'personalize:GetPersonalizedRanking',
'personalize:GetRecommendations',
'personalize:GetSolutionMetrics',
'personalize:ListCampaigns',
'personalize:ListDatasetGroups',
'personalize:ListDatasetImportJobs',
'personalize:ListDatasets',
'personalize:ListEventTrackers',
'personalize:ListRecipes',
'personalize:ListSchemas',
'personalize:ListSolutionVersions',
'personalize:ListSolutions',
'personalize:PutEvents',
'personalize:UpdateCampaign',
'mobiletargeting:CreateApp',
'mobiletargeting:CreateCampaign',
'mobiletargeting:CreateExportJob',
'mobiletargeting:CreateImportJob',
'mobiletargeting:CreateSegment',
'mobiletargeting:DeleteAdmChannel',
'mobiletargeting:DeleteApnsChannel',
'mobiletargeting:DeleteApnsSandboxChannel',
'mobiletargeting:DeleteApnsVoipChannel',
'mobiletargeting:DeleteApnsVoipSandboxChannel',
'mobiletargeting:DeleteApp',
'mobiletargeting:DeleteBaiduChannel',
'mobiletargeting:DeleteCampaign',
'mobiletargeting:DeleteEmailChannel',
'mobiletargeting:DeleteEndpoint',
'mobiletargeting:DeleteEventStream',
'mobiletargeting:DeleteGcmChannel',
'mobiletargeting:DeleteSegment',
'mobiletargeting:DeleteSmsChannel',
'mobiletargeting:DeleteUserEndpoints',
'mobiletargeting:DeleteVoiceChannel',
'mobiletargeting:GetAdmChannel',
'mobiletargeting:GetApnsChannel',
'mobiletargeting:GetApnsSandboxChannel',
'mobiletargeting:GetApnsVoipChannel',
'mobiletargeting:GetApnsVoipSandboxChannel',
'mobiletargeting:GetApp',
'mobiletargeting:GetApplicationSettings',
'mobiletargeting:GetApps',
'mobiletargeting:GetBaiduChannel',
'mobiletargeting:GetCampaign',
'mobiletargeting:GetCampaignActivities',
'mobiletargeting:GetCampaignVersion',
'mobiletargeting:GetCampaignVersions',
'mobiletargeting:GetCampaigns',
'mobiletargeting:GetChannels',
'mobiletargeting:GetEmailChannel',
'mobiletargeting:GetEndpoint',
'mobiletargeting:GetEventStream',
'mobiletargeting:GetExportJob',
'mobiletargeting:GetExportJobs',
'mobiletargeting:GetGcmChannel',
'mobiletargeting:GetImportJob',
'mobiletargeting:GetImportJobs',
'mobiletargeting:GetSegment',
'mobiletargeting:GetSegmentExportJobs',
'mobiletargeting:GetSegmentImportJobs',
'mobiletargeting:GetSegmentVersion',
'mobiletargeting:GetSegmentVersions',
'mobiletargeting:GetSegments',
'mobiletargeting:GetSmsChannel',
'mobiletargeting:GetUserEndpoints',
'mobiletargeting:GetVoiceChannel',
'mobiletargeting:ListTagsForResource',
'mobiletargeting:PhoneNumberValidate',
'mobiletargeting:PutEventStream',
'mobiletargeting:PutEvents',
'mobiletargeting:RemoveAttributes',
'mobiletargeting:SendMessages',
'mobiletargeting:SendUsersMessages',
'mobiletargeting:TagResource',
'mobiletargeting:UntagResource',
'mobiletargeting:UpdateAdmChannel',
'mobiletargeting:UpdateApnsChannel',
'mobiletargeting:UpdateApnsSandboxChannel',
'mobiletargeting:UpdateApnsVoipChannel',
'mobiletargeting:UpdateApnsVoipSandboxChannel',
'mobiletargeting:UpdateApplicationSettings',
'mobiletargeting:UpdateBaiduChannel',
'mobiletargeting:UpdateCampaign',
'mobiletargeting:UpdateEmailChannel',
'mobiletargeting:UpdateEndpoint',
'mobiletargeting:UpdateEndpointsBatch',
'mobiletargeting:UpdateGcmChannel',
'mobiletargeting:UpdateSegment',
'mobiletargeting:UpdateSmsChannel',
'mobiletargeting:UpdateVoiceChannel',
'ses:CreateConfigurationSet',
'ses:CreateConfigurationSetEventDestination',
'ses:CreateDedicatedIpPool',
'ses:CreateDeliverabilityTestReport',
'ses:CreateEmailIdentity',
'ses:DeleteConfigurationSet',
'ses:DeleteConfigurationSetEventDestination',
'ses:DeleteDedicatedIpPool',
'ses:DeleteEmailIdentity',
'ses:GetAccount',
'ses:GetBlacklistReports',
'ses:GetConfigurationSet',
'ses:GetConfigurationSetEventDestinations',
'ses:GetDedicatedIp',
'ses:GetDedicatedIps',
'ses:GetDeliverabilityDashboardOptions',
'ses:GetDeliverabilityTestReport',
'ses:GetDomainStatisticsReport',
'ses:GetEmailIdentity',
'ses:ListConfigurationSets',
'ses:ListDedicatedIpPools',
'ses:ListDeliverabilityTestReports',
'ses:ListEmailIdentities',
'ses:ListTagsForResource',
'ses:PutAccountDedicatedIpWarmupAttributes',
'ses:PutAccountSendingAttributes',
'ses:PutConfigurationSetDeliveryOptions',
'ses:PutConfigurationSetReputationOptions',
'ses:PutConfigurationSetSendingOptions',
'ses:PutConfigurationSetTrackingOptions',
'ses:PutDedicatedIpInPool',
'ses:PutDedicatedIpWarmupAttributes',
'ses:PutDeliverabilityDashboardOption',
'ses:PutEmailIdentityDkimAttributes',
'ses:PutEmailIdentityFeedbackAttributes',
'ses:PutEmailIdentityMailFromAttributes',
'ses:SendEmail',
'ses:TagResource',
'ses:UntagResource',
'ses:UpdateConfigurationSetEventDestination',
'sms-voice:CreateConfigurationSet',
'sms-voice:CreateConfigurationSetEventDestination',
'sms-voice:DeleteConfigurationSet',
'sms-voice:DeleteConfigurationSetEventDestination',
'sms-voice:GetConfigurationSetEventDestinations',
'sms-voice:ListConfigurationSets',
'sms-voice:SendVoiceMessage',
'sms-voice:UpdateConfigurationSetEventDestination',
'polly:DeleteLexicon',
'polly:DescribeVoices',
'polly:GetLexicon',
'polly:GetSpeechSynthesisTask',
'polly:ListLexicons',
'polly:ListSpeechSynthesisTasks',
'polly:PutLexicon',
'polly:StartSpeechSynthesisTask',
'polly:SynthesizeSpeech',
'pricing:DescribeServices',
'pricing:GetAttributeValues',
'pricing:GetProducts',
'aws-marketplace:AssociateProductsWithPrivateMarketplace[permission only]',
'aws-marketplace:CreatePrivateMarketplace[permission only]',
'aws-marketplace:CreatePrivateMarketplaceProfile[permission only]',
'aws-marketplace:DescribePrivateMarketplaceProducts[permission only]',
'aws-marketplace:DescribePrivateMarketplaceProfile[permission only]',
'aws-marketplace:DescribePrivateMarketplaceStatus[permission only]',
'aws-marketplace:DisassociateProductsFromPrivateMarketplace[permission only]',
'aws-marketplace:ListPrivateMarketplaceProducts[permission only]',
'aws-marketplace:StartPrivateMarketplace[permission only]',
'aws-marketplace:StopPrivateMarketplace[permission only]',
'aws-marketplace:UpdatePrivateMarketplaceProfile[permission only]',
'quicksight:CreateAdmin[permission only]',
'quicksight:CreateGroup',
'quicksight:CreateGroupMembership',
'quicksight:CreateReader[permission only]',
'quicksight:CreateUser[permission only]',
'quicksight:DeleteGroup',
'quicksight:DeleteGroupMembership',
'quicksight:DeleteUser',
'quicksight:DeleteUserByPrincipalId',
'quicksight:DescribeGroup',
'quicksight:DescribeUser',
'quicksight:GetDashboardEmbedUrl',
'quicksight:GetGroupMapping[permission only]',
'quicksight:ListGroupMemberships',
'quicksight:ListGroups',
'quicksight:ListUserGroups',
'quicksight:ListUsers',
'quicksight:RegisterUser',
'quicksight:SearchDirectoryGroups[permission only]',
'quicksight:SetGroupMapping[permission only]',
'quicksight:Subscribe[permission only]',
'quicksight:Unsubscribe[permission only]',
'quicksight:UpdateGroup',
'quicksight:UpdateUser',
'rds:AddRoleToDBCluster',
'rds:AddRoleToDBInstance',
'rds:AddSourceIdentifierToSubscription',
'rds:AddTagsToResource',
'rds:ApplyPendingMaintenanceAction',
'rds:AuthorizeDBSecurityGroupIngress',
'rds:BacktrackDBCluster',
'rds:CopyDBClusterParameterGroup',
'rds:CopyDBClusterSnapshot',
'rds:CopyDBParameterGroup',
'rds:CopyDBSnapshot',
'rds:CopyOptionGroup',
'rds:CreateDBCluster',
'rds:CreateDBClusterEndpoint',
'rds:CreateDBClusterParameterGroup',
'rds:CreateDBClusterSnapshot',
'rds:CreateDBInstance',
'rds:CreateDBInstanceReadReplica',
'rds:CreateDBParameterGroup',
'rds:CreateDBSecurityGroup',
'rds:CreateDBSnapshot',
'rds:CreateDBSubnetGroup',
'rds:CreateEventSubscription',
'rds:CreateGlobalCluster',
'rds:CreateOptionGroup',
'rds:DeleteDBCluster',
'rds:DeleteDBClusterEndpoint',
'rds:DeleteDBClusterParameterGroup',
'rds:DeleteDBClusterSnapshot',
'rds:DeleteDBInstance',
'rds:DeleteDBInstanceAutomatedBackup',
'rds:DeleteDBParameterGroup',
'rds:DeleteDBSecurityGroup',
'rds:DeleteDBSnapshot',
'rds:DeleteDBSubnetGroup',
'rds:DeleteEventSubscription',
'rds:DeleteGlobalCluster',
'rds:DeleteOptionGroup',
'rds:DescribeAccountAttributes',
'rds:DescribeCertificates',
'rds:DescribeDBClusterBacktracks',
'rds:DescribeDBClusterEndpoints',
'rds:DescribeDBClusterParameterGroups',
'rds:DescribeDBClusterParameters',
'rds:DescribeDBClusterSnapshotAttributes',
'rds:DescribeDBClusterSnapshots',
'rds:DescribeDBClusters',
'rds:DescribeDBEngineVersions',
'rds:DescribeDBInstanceAutomatedBackups',
'rds:DescribeDBInstances',
'rds:DescribeDBLogFiles',
'rds:DescribeDBParameterGroups',
'rds:DescribeDBParameters',
'rds:DescribeDBSecurityGroups',
'rds:DescribeDBSnapshotAttributes',
'rds:DescribeDBSnapshots',
'rds:DescribeDBSubnetGroups',
'rds:DescribeEngineDefaultClusterParameters',
'rds:DescribeEngineDefaultParameters',
'rds:DescribeEventCategories',
'rds:DescribeEventSubscriptions',
'rds:DescribeEvents',
'rds:DescribeGlobalClusters',
'rds:DescribeOptionGroupOptions',
'rds:DescribeOptionGroups',
'rds:DescribeOrderableDBInstanceOptions',
'rds:DescribePendingMaintenanceActions',
'rds:DescribeReservedDBInstances',
'rds:DescribeReservedDBInstancesOfferings',
'rds:DescribeSourceRegions',
'rds:DescribeValidDBInstanceModifications',
'rds:DownloadCompleteDBLogFile',
'rds:DownloadDBLogFilePortion',
'rds:FailoverDBCluster',
'rds:ListTagsForResource',
'rds:ModifyCurrentDBClusterCapacity',
'rds:ModifyDBCluster',
'rds:ModifyDBClusterEndpoint',
'rds:ModifyDBClusterParameterGroup',
'rds:ModifyDBClusterSnapshotAttribute',
'rds:ModifyDBInstance',
'rds:ModifyDBParameterGroup',
'rds:ModifyDBSnapshot',
'rds:ModifyDBSnapshotAttribute',
'rds:ModifyDBSubnetGroup',
'rds:ModifyEventSubscription',
'rds:ModifyGlobalCluster',
'rds:ModifyOptionGroup',
'rds:PromoteReadReplica',
'rds:PromoteReadReplicaDBCluster',
'rds:PurchaseReservedDBInstancesOffering',
'rds:RebootDBInstance',
'rds:RemoveFromGlobalCluster',
'rds:RemoveRoleFromDBCluster',
'rds:RemoveRoleFromDBInstance',
'rds:RemoveSourceIdentifierFromSubscription',
'rds:RemoveTagsFromResource',
'rds:ResetDBClusterParameterGroup',
'rds:ResetDBParameterGroup',
'rds:RestoreDBClusterFromS3',
'rds:RestoreDBClusterFromSnapshot',
'rds:RestoreDBClusterToPointInTime',
'rds:RestoreDBInstanceFromDBSnapshot',
'rds:RestoreDBInstanceFromS3',
'rds:RestoreDBInstanceToPointInTime',
'rds:RevokeDBSecurityGroupIngress',
'rds:StartDBCluster',
'rds:StartDBInstance',
'rds:StopDBCluster',
'rds:StopDBInstance',
'rds-data:BatchExecuteStatement',
'rds-data:BeginTransaction',
'rds-data:CommitTransaction',
'rds-data:ExecuteStatement',
'rds-data:RollbackTransaction',
'redshift:AcceptReservedNodeExchange',
'redshift:AuthorizeClusterSecurityGroupIngress',
'redshift:AuthorizeSnapshotAccess',
'redshift:BatchDeleteClusterSnapshots',
'redshift:BatchModifyClusterSnapshots',
'redshift:CancelQuery',
'redshift:CancelQuerySession[permission only]',
'redshift:CancelResize',
'redshift:CopyClusterSnapshot',
'redshift:CreateCluster',
'redshift:CreateClusterParameterGroup',
'redshift:CreateClusterSecurityGroup',
'redshift:CreateClusterSnapshot',
'redshift:CreateClusterSubnetGroup',
'redshift:CreateClusterUser',
'redshift:CreateEventSubscription',
'redshift:CreateHsmClientCertificate',
'redshift:CreateHsmConfiguration',
'redshift:CreateSavedQuery',
'redshift:CreateSnapshotCopyGrant',
'redshift:CreateSnapshotSchedule',
'redshift:CreateTags',
'redshift:DeleteCluster',
'redshift:DeleteClusterParameterGroup',
'redshift:DeleteClusterSecurityGroup',
'redshift:DeleteClusterSnapshot',
'redshift:DeleteClusterSubnetGroup',
'redshift:DeleteEventSubscription',
'redshift:DeleteHsmClientCertificate',
'redshift:DeleteHsmConfiguration',
'redshift:DeleteSavedQueries',
'redshift:DeleteSnapshotCopyGrant',
'redshift:DeleteSnapshotSchedule',
'redshift:DeleteTags',
'redshift:DescribeAccountAttributes',
'redshift:DescribeClusterDbRevisions',
'redshift:DescribeClusterParameterGroups',
'redshift:DescribeClusterParameters',
'redshift:DescribeClusterSecurityGroups',
'redshift:DescribeClusterSnapshots',
'redshift:DescribeClusterSubnetGroups',
'redshift:DescribeClusterTracks',
'redshift:DescribeClusterVersions',
'redshift:DescribeClusters',
'redshift:DescribeDefaultClusterParameters',
'redshift:DescribeEventCategories',
'redshift:DescribeEventSubscriptions',
'redshift:DescribeEvents',
'redshift:DescribeHsmClientCertificates',
'redshift:DescribeHsmConfigurations',
'redshift:DescribeLoggingStatus',
'redshift:DescribeOrderableClusterOptions',
'redshift:DescribeQuery',
'redshift:DescribeReservedNodeOfferings',
'redshift:DescribeReservedNodes',
'redshift:DescribeResize',
'redshift:DescribeSnapshotCopyGrants',
'redshift:DescribeSnapshotSchedules',
'redshift:DescribeStorage',
'redshift:DescribeTable',
'redshift:DescribeTableRestoreStatus',
'redshift:DescribeTags',
'redshift:DisableLogging',
'redshift:DisableSnapshotCopy',
'redshift:EnableLogging',
'redshift:EnableSnapshotCopy',
'redshift:ExecuteQuery',
'redshift:FetchResults',
'redshift:GetClusterCredentials',
'redshift:GetReservedNodeExchangeOfferings',
'redshift:JoinGroup',
'redshift:ListDatabases',
'redshift:ListSavedQueries',
'redshift:ListSchemas',
'redshift:ListTables',
'redshift:ModifyCluster',
'redshift:ModifyClusterDbRevision',
'redshift:ModifyClusterIamRoles',
'redshift:ModifyClusterMaintenance',
'redshift:ModifyClusterParameterGroup',
'redshift:ModifyClusterSnapshot',
'redshift:ModifyClusterSnapshotSchedule',
'redshift:ModifyClusterSubnetGroup',
'redshift:ModifyEventSubscription',
'redshift:ModifySavedQuery',
'redshift:ModifySnapshotCopyRetentionPeriod',
'redshift:ModifySnapshotSchedule',
'redshift:PurchaseReservedNodeOffering',
'redshift:RebootCluster',
'redshift:ResetClusterParameterGroup',
'redshift:ResizeCluster',
'redshift:RestoreFromClusterSnapshot',
'redshift:RestoreTableFromClusterSnapshot',
'redshift:RevokeClusterSecurityGroupIngress',
'redshift:RevokeSnapshotAccess',
'redshift:RotateEncryptionKey',
'redshift:ViewQueriesFromConsole',
'redshift:ViewQueriesInConsole[permission only]',
'rekognition:CompareFaces',
'rekognition:CreateCollection',
'rekognition:CreateStreamProcessor',
'rekognition:DeleteCollection',
'rekognition:DeleteFaces',
'rekognition:DeleteStreamProcessor',
'rekognition:DescribeCollection',
'rekognition:DescribeStreamProcessor',
'rekognition:DetectFaces',
'rekognition:DetectLabels',
'rekognition:DetectModerationLabels',
'rekognition:DetectText',
'rekognition:GetCelebrityInfo',
'rekognition:GetCelebrityRecognition',
'rekognition:GetContentModeration',
'rekognition:GetFaceDetection',
'rekognition:GetFaceSearch',
'rekognition:GetLabelDetection',
'rekognition:GetPersonTracking',
'rekognition:IndexFaces',
'rekognition:ListCollections',
'rekognition:ListFaces',
'rekognition:ListStreamProcessors',
'rekognition:RecognizeCelebrities',
'rekognition:SearchFaces',
'rekognition:SearchFacesByImage',
'rekognition:StartCelebrityRecognition',
'rekognition:StartContentModeration',
'rekognition:StartFaceDetection',
'rekognition:StartFaceSearch',
'rekognition:StartLabelDetection',
'rekognition:StartPersonTracking',
'rekognition:StartStreamProcessor',
'rekognition:StopStreamProcessor',
'ram:AcceptResourceShareInvitation',
'ram:AssociateResourceShare',
'ram:CreateResourceShare',
'ram:DeleteResourceShare',
'ram:DisassociateResourceShare',
'ram:EnableSharingWithAwsOrganization',
'ram:GetResourcePolicies',
'ram:GetResourceShareAssociations',
'ram:GetResourceShareInvitations',
'ram:GetResourceShares',
'ram:ListPendingInvitationResources',
'ram:ListPrincipals',
'ram:ListResources',
'ram:RejectResourceShareInvitation',
'ram:TagResource',
'ram:UntagResource',
'ram:UpdateResourceShare',
'tag:GetResources',
'tag:GetTagKeys',
'tag:GetTagValues',
'tag:TagResources',
'tag:UntagResources',
'resource-groups:CreateGroup',
'resource-groups:DeleteGroup',
'resource-groups:GetGroup',
'resource-groups:GetGroupQuery',
'resource-groups:GetTags',
'resource-groups:ListGroupResources',
'resource-groups:ListGroups',
'resource-groups:SearchResources',
'resource-groups:Tag',
'resource-groups:Untag',
'resource-groups:UpdateGroup',
'resource-groups:UpdateGroupQuery',
'robomaker:BatchDescribeSimulationJob',
'robomaker:CancelDeploymentJob',
'robomaker:CancelSimulationJob',
'robomaker:CreateDeploymentJob',
'robomaker:CreateFleet',
'robomaker:CreateRobot',
'robomaker:CreateRobotApplication',
'robomaker:CreateRobotApplicationVersion',
'robomaker:CreateSimulationApplication',
'robomaker:CreateSimulationApplicationVersion',
'robomaker:CreateSimulationJob',
'robomaker:DeleteFleet',
'robomaker:DeleteRobot',
'robomaker:DeleteRobotApplication',
'robomaker:DeleteSimulationApplication',
'robomaker:DeregisterRobot',
'robomaker:DescribeDeploymentJob',
'robomaker:DescribeFleet',
'robomaker:DescribeRobot',
'robomaker:DescribeRobotApplication',
'robomaker:DescribeSimulationApplication',
'robomaker:DescribeSimulationJob',
'robomaker:ListDeploymentJobs',
'robomaker:ListFleets',
'robomaker:ListRobotApplications',
'robomaker:ListRobots',
'robomaker:ListSimulationApplications',
'robomaker:ListSimulationJobs',
'robomaker:ListTagsForResource',
'robomaker:RegisterRobot',
'robomaker:RestartSimulationJob',
'robomaker:SyncDeploymentJob',
'robomaker:TagResource',
'robomaker:UntagResource',
'robomaker:UpdateRobotApplication',
'robomaker:UpdateSimulationApplication',
'route53:AssociateVPCWithHostedZone',
'route53:ChangeResourceRecordSets',
'route53:ChangeTagsForResource',
'route53:CreateHealthCheck',
'route53:CreateHostedZone',
'route53:CreateQueryLoggingConfig',
'route53:CreateReusableDelegationSet',
'route53:CreateTrafficPolicy',
'route53:CreateTrafficPolicyInstance',
'route53:CreateTrafficPolicyVersion',
'route53:CreateVPCAssociationAuthorization',
'route53:DeleteHealthCheck',
'route53:DeleteHostedZone',
'route53:DeleteQueryLoggingConfig',
'route53:DeleteReusableDelegationSet',
'route53:DeleteTrafficPolicy',
'route53:DeleteTrafficPolicyInstance',
'route53:DeleteVPCAssociationAuthorization',
'route53:DisassociateVPCFromHostedZone',
'route53:GetAccountLimit',
'route53:GetChange',
'route53:GetCheckerIpRanges',
'route53:GetGeoLocation',
'route53:GetHealthCheck',
'route53:GetHealthCheckCount',
'route53:GetHealthCheckLastFailureReason',
'route53:GetHealthCheckStatus',
'route53:GetHostedZone',
'route53:GetHostedZoneCount',
'route53:GetHostedZoneLimit',
'route53:GetQueryLoggingConfig',
'route53:GetReusableDelegationSet',
'route53:GetReusableDelegationSetLimit',
'route53:GetTrafficPolicy',
'route53:GetTrafficPolicyInstance',
'route53:GetTrafficPolicyInstanceCount',
'route53:ListGeoLocations',
'route53:ListHealthChecks',
'route53:ListHostedZones',
'route53:ListHostedZonesByName',
'route53:ListQueryLoggingConfigs',
'route53:ListResourceRecordSets',
'route53:ListReusableDelegationSets',
'route53:ListTagsForResource',
'route53:ListTagsForResources',
'route53:ListTrafficPolicies',
'route53:ListTrafficPolicyInstances',
'route53:ListTrafficPolicyInstancesByHostedZone',
'route53:ListTrafficPolicyInstancesByPolicy',
'route53:ListTrafficPolicyVersions',
'route53:ListVPCAssociationAuthorizations',
'route53:TestDNSAnswer',
'route53:UpdateHealthCheck',
'route53:UpdateHostedZoneComment',
'route53:UpdateTrafficPolicyComment',
'route53:UpdateTrafficPolicyInstance',
'route53resolver:AssociateResolverEndpointIpAddress',
'route53resolver:AssociateResolverRule',
'route53resolver:CreateResolverEndpoint',
'route53resolver:CreateResolverRule',
'route53resolver:DeleteResolverEndpoint',
'route53resolver:DeleteResolverRule',
'route53resolver:DisassociateResolverEndpointIpAddress',
'route53resolver:DisassociateResolverRule',
'route53resolver:GetResolverEndpoint',
'route53resolver:GetResolverRule',
'route53resolver:GetResolverRuleAssociation',
'route53resolver:GetResolverRulePolicy',
'route53resolver:ListResolverEndpointIpAddresses',
'route53resolver:ListResolverEndpoints',
'route53resolver:ListResolverRuleAssociations',
'route53resolver:ListResolverRules',
'route53resolver:ListTagsForResource',
'route53resolver:PutResolverRulePolicy',
'route53resolver:TagResource',
'route53resolver:UntagResource',
'route53resolver:UpdateResolverEndpoint',
'route53resolver:UpdateResolverRule',
'route53domains:CheckDomainAvailability',
'route53domains:DeleteTagsForDomain',
'route53domains:DisableDomainAutoRenew',
'route53domains:DisableDomainTransferLock',
'route53domains:EnableDomainAutoRenew',
'route53domains:EnableDomainTransferLock',
'route53domains:GetContactReachabilityStatus',
'route53domains:GetDomainDetail',
'route53domains:GetDomainSuggestions',
'route53domains:GetOperationDetail',
'route53domains:ListDomains',
'route53domains:ListOperations',
'route53domains:ListTagsForDomain',
'route53domains:RegisterDomain',
'route53domains:RenewDomain',
'route53domains:ResendContactReachabilityEmail',
'route53domains:RetrieveDomainAuthCode',
'route53domains:TransferDomain',
'route53domains:UpdateDomainContact',
'route53domains:UpdateDomainContactPrivacy',
'route53domains:UpdateDomainNameservers',
'route53domains:UpdateTagsForDomain',
'route53domains:ViewBilling',
's3:AbortMultipartUpload',
's3:CreateBucket',
's3:CreateJob',
's3:DeleteBucket',
's3:DeleteBucketPolicy',
's3:DeleteBucketWebsite',
's3:DeleteObject',
's3:DeleteObjectTagging',
's3:DeleteObjectVersion',
's3:DeleteObjectVersionTagging',
's3:DescribeJob',
's3:GetAccelerateConfiguration',
's3:GetAccountPublicAccessBlock',
's3:GetAnalyticsConfiguration',
's3:GetBucketAcl',
's3:GetBucketCORS',
's3:GetBucketLocation',
's3:GetBucketLogging',
's3:GetBucketNotification',
's3:GetBucketObjectLockConfiguration',
's3:GetBucketPolicy',
's3:GetBucketPolicyStatus',
's3:GetBucketPublicAccessBlock',
's3:GetBucketRequestPayment',
's3:GetBucketTagging',
's3:GetBucketVersioning',
's3:GetBucketWebsite',
's3:GetEncryptionConfiguration',
's3:GetInventoryConfiguration',
's3:GetLifecycleConfiguration',
's3:GetMetricsConfiguration',
's3:GetObject',
's3:GetObjectAcl',
's3:GetObjectLegalHold',
's3:GetObjectRetention',
's3:GetObjectTagging',
's3:GetObjectTorrent',
's3:GetObjectVersion',
's3:GetObjectVersionAcl',
's3:GetObjectVersionForReplication',
's3:GetObjectVersionTagging',
's3:GetObjectVersionTorrent',
's3:GetReplicationConfiguration',
's3:ListAllMyBuckets',
's3:ListBucket',
's3:ListBucketByTags',
's3:ListBucketMultipartUploads',
's3:ListBucketVersions',
's3:ListJobs',
's3:ListMultipartUploadParts',
's3:ObjectOwnerOverrideToBucketOwner',
's3:PutAccelerateConfiguration',
's3:PutAccountPublicAccessBlock',
's3:PutAnalyticsConfiguration',
's3:PutBucketAcl',
's3:PutBucketCORS',
's3:PutBucketLogging',
's3:PutBucketNotification',
's3:PutBucketObjectLockConfiguration',
's3:PutBucketPolicy',
's3:PutBucketPublicAccessBlock',
's3:PutBucketRequestPayment',
's3:PutBucketTagging',
's3:PutBucketVersioning',
's3:PutBucketWebsite',
's3:PutEncryptionConfiguration',
's3:PutInventoryConfiguration',
's3:PutLifecycleConfiguration',
's3:PutMetricsConfiguration',
's3:PutObject',
's3:PutObjectAcl',
's3:PutObjectLegalHold',
's3:PutObjectRetention',
's3:PutObjectTagging',
's3:PutObjectVersionAcl',
's3:PutObjectVersionTagging',
's3:PutReplicationConfiguration',
's3:ReplicateDelete',
's3:ReplicateObject',
's3:ReplicateTags',
's3:RestoreObject',
's3:UpdateJobPriority',
's3:UpdateJobStatus',
'sagemaker:AddTags',
'sagemaker:CreateAlgorithm',
'sagemaker:CreateCodeRepository',
'sagemaker:CreateCompilationJob',
'sagemaker:CreateEndpoint',
'sagemaker:CreateEndpointConfig',
'sagemaker:CreateHyperParameterTuningJob',
'sagemaker:CreateLabelingJob',
'sagemaker:CreateModel',
'sagemaker:CreateModelPackage',
'sagemaker:CreateNotebookInstance',
'sagemaker:CreateNotebookInstanceLifecycleConfig',
'sagemaker:CreatePresignedNotebookInstanceUrl',
'sagemaker:CreateTrainingJob',
'sagemaker:CreateTransformJob',
'sagemaker:CreateWorkteam',
'sagemaker:DeleteAlgorithm',
'sagemaker:DeleteCodeRepository',
'sagemaker:DeleteEndpoint',
'sagemaker:DeleteEndpointConfig',
'sagemaker:DeleteModel',
'sagemaker:DeleteModelPackage',
'sagemaker:DeleteNotebookInstance',
'sagemaker:DeleteNotebookInstanceLifecycleConfig',
'sagemaker:DeleteTags',
'sagemaker:DeleteWorkteam',
'sagemaker:DescribeAlgorithm',
'sagemaker:DescribeCodeRepository',
'sagemaker:DescribeCompilationJob',
'sagemaker:DescribeEndpoint',
'sagemaker:DescribeEndpointConfig',
'sagemaker:DescribeHyperParameterTuningJob',
'sagemaker:DescribeLabelingJob',
'sagemaker:DescribeModel',
'sagemaker:DescribeModelPackage',
'sagemaker:DescribeNotebookInstance',
'sagemaker:DescribeNotebookInstanceLifecycleConfig',
'sagemaker:DescribeSubscribedWorkteam',
'sagemaker:DescribeTrainingJob',
'sagemaker:DescribeTransformJob',
'sagemaker:DescribeWorkteam',
'sagemaker:GetSearchSuggestions',
'sagemaker:InvokeEndpoint',
'sagemaker:ListAlgorithms',
'sagemaker:ListCodeRepositories',
'sagemaker:ListCompilationJobs',
'sagemaker:ListEndpointConfigs',
'sagemaker:ListEndpoints',
'sagemaker:ListHyperParameterTuningJobs',
'sagemaker:ListLabelingJobs',
'sagemaker:ListLabelingJobsForWorkteam',
'sagemaker:ListModelPackages',
'sagemaker:ListModels',
'sagemaker:ListNotebookInstanceLifecycleConfigs',
'sagemaker:ListNotebookInstances',
'sagemaker:ListSubscribedWorkteams',
'sagemaker:ListTags',
'sagemaker:ListTrainingJobs',
'sagemaker:ListTrainingJobsForHyperParameterTuningJob',
'sagemaker:ListTransformJobs',
'sagemaker:ListWorkteams',
'sagemaker:RenderUiTemplate',
'sagemaker:Search',
'sagemaker:StartNotebookInstance',
'sagemaker:StopCompilationJob',
'sagemaker:StopHyperParameterTuningJob',
'sagemaker:StopLabelingJob',
'sagemaker:StopNotebookInstance',
'sagemaker:StopTrainingJob',
'sagemaker:StopTransformJob',
'sagemaker:UpdateCodeRepository',
'sagemaker:UpdateEndpoint',
'sagemaker:UpdateEndpointWeightsAndCapacities',
'sagemaker:UpdateNotebookInstance',
'sagemaker:UpdateNotebookInstanceLifecycleConfig',
'sagemaker:UpdateWorkteam',
'secretsmanager:CancelRotateSecret',
'secretsmanager:CreateSecret',
'secretsmanager:DeleteResourcePolicy',
'secretsmanager:DeleteSecret',
'secretsmanager:DescribeSecret',
'secretsmanager:GetRandomPassword',
'secretsmanager:GetResourcePolicy',
'secretsmanager:GetSecretValue',
'secretsmanager:ListSecretVersionIds',
'secretsmanager:ListSecrets',
'secretsmanager:PutResourcePolicy',
'secretsmanager:PutSecretValue',
'secretsmanager:RestoreSecret',
'secretsmanager:RotateSecret',
'secretsmanager:TagResource',
'secretsmanager:UntagResource',
'secretsmanager:UpdateSecret',
'secretsmanager:UpdateSecretVersionStage',
'securityhub:AcceptInvitation',
'securityhub:BatchDisableStandards',
'securityhub:BatchEnableStandards',
'securityhub:BatchImportFindings',
'securityhub:CreateInsight',
'securityhub:CreateMembers',
'securityhub:DeclineInvitations',
'securityhub:DeleteInsight',
'securityhub:DeleteInvitations',
'securityhub:DeleteMembers',
'securityhub:DescribeProducts',
'securityhub:DisableImportFindingsForProduct',
'securityhub:DisableSecurityHub',
'securityhub:DisassociateFromMasterAccount',
'securityhub:DisassociateMembers',
'securityhub:EnableImportFindingsForProduct',
'securityhub:EnableSecurityHub',
'securityhub:GetEnabledStandards',
'securityhub:GetFindings',
'securityhub:GetInsightResults',
'securityhub:GetInsights',
'securityhub:GetInvitationsCount',
'securityhub:GetMasterAccount',
'securityhub:GetMembers',
'securityhub:InviteMembers',
'securityhub:ListEnabledProductsForImport',
'securityhub:ListInvitations',
'securityhub:ListMembers',
'securityhub:ListProductSubscribers',
'securityhub:UpdateFindings',
'securityhub:UpdateInsight',
'sts:AssumeRole',
'sts:AssumeRoleWithSAML',
'sts:AssumeRoleWithWebIdentity',
'sts:DecodeAuthorizationMessage',
'sts:GetCallerIdentity',
'sts:GetFederationToken',
'sms:CreateApp',
'sms:CreateReplicationJob',
'sms:DeleteApp',
'sms:DeleteAppLaunchConfiguration',
'sms:DeleteAppReplicationConfiguration',
'sms:DeleteReplicationJob',
'sms:DeleteServerCatalog',
'sms:DisassociateConnectors',
'sms:GenerateChangeSet',
'sms:GenerateTemplate',
'sms:GetApp',
'sms:GetAppLaunchConfiguration',
'sms:GetAppReplicationConfiguration',
'sms:GetConnectors',
'sms:GetReplicationJobs',
'sms:GetReplicationRuns',
'sms:GetServers',
'sms:ImportServerCatalog',
'sms:LaunchApp',
'sms:ListApps',
'sms:PutAppLaunchConfiguration',
'sms:PutAppReplicationConfiguration',
'sms:StartAppReplication',
'sms:StartOnDemandReplicationRun',
'sms:StopAppReplication',
'sms:TerminateApp',
'sms:UpdateApp',
'sms:UpdateReplicationJob',
'serverlessrepo:CreateApplication',
'serverlessrepo:CreateApplicationVersion',
'serverlessrepo:CreateCloudFormationChangeSet',
'serverlessrepo:CreateCloudFormationTemplate',
'serverlessrepo:DeleteApplication',
'serverlessrepo:GetApplication',
'serverlessrepo:GetApplicationPolicy',
'serverlessrepo:GetCloudFormationTemplate',
'serverlessrepo:ListApplicationDependencies',
'serverlessrepo:ListApplicationVersions',
'serverlessrepo:ListApplications',
'serverlessrepo:PutApplicationPolicy',
'serverlessrepo:SearchApplications',
'serverlessrepo:UpdateApplication',
'servicecatalog:AcceptPortfolioShare',
'servicecatalog:AssociatePrincipalWithPortfolio',
'servicecatalog:AssociateProductWithPortfolio',
'servicecatalog:AssociateServiceActionWithProvisioningArtifact',
'servicecatalog:AssociateTagOptionWithResource',
'servicecatalog:BatchAssociateServiceActionWithProvisioningArtifact',
'servicecatalog:BatchDisassociateServiceActionFromProvisioningArtifact',
'servicecatalog:CopyProduct',
'servicecatalog:CreateConstraint',
'servicecatalog:CreatePortfolio',
'servicecatalog:CreatePortfolioShare',
'servicecatalog:CreateProduct',
'servicecatalog:CreateProvisionedProductPlan',
'servicecatalog:CreateProvisioningArtifact',
'servicecatalog:CreateServiceAction',
'servicecatalog:CreateTagOption',
'servicecatalog:DeleteConstraint',
'servicecatalog:DeletePortfolio',
'servicecatalog:DeletePortfolioShare',
'servicecatalog:DeleteProduct',
'servicecatalog:DeleteProvisionedProductPlan',
'servicecatalog:DeleteProvisioningArtifact',
'servicecatalog:DeleteServiceAction',
'servicecatalog:DeleteTagOption',
'servicecatalog:DescribeConstraint',
'servicecatalog:DescribeCopyProductStatus',
'servicecatalog:DescribePortfolio',
'servicecatalog:DescribePortfolioShareStatus',
'servicecatalog:DescribeProduct',
'servicecatalog:DescribeProductAsAdmin',
'servicecatalog:DescribeProductView',
'servicecatalog:DescribeProvisionedProduct',
'servicecatalog:DescribeProvisionedProductPlan',
'servicecatalog:DescribeProvisioningArtifact',
'servicecatalog:DescribeProvisioningParameters',
'servicecatalog:DescribeRecord',
'servicecatalog:DescribeServiceAction',
'servicecatalog:DescribeTagOption',
'servicecatalog:DisableAWSOrganizationsAccess',
'servicecatalog:DisassociatePrincipalFromPortfolio',
'servicecatalog:DisassociateProductFromPortfolio',
'servicecatalog:DisassociateServiceActionFromProvisioningArtifact',
'servicecatalog:DisassociateTagOptionFromResource',
'servicecatalog:EnableAWSOrganizationsAccess',
'servicecatalog:ExecuteProvisionedProductPlan',
'servicecatalog:ExecuteProvisionedProductServiceAction',
'servicecatalog:GetAWSOrganizationsAccessStatus',
'servicecatalog:ListAcceptedPortfolioShares',
'servicecatalog:ListConstraintsForPortfolio',
'servicecatalog:ListLaunchPaths',
'servicecatalog:ListOrganizationPortfolioAccess',
'servicecatalog:ListPortfolioAccess',
'servicecatalog:ListPortfolios',
'servicecatalog:ListPortfoliosForProduct',
'servicecatalog:ListPrincipalsForPortfolio',
'servicecatalog:ListProvisionedProductPlans',
'servicecatalog:ListProvisioningArtifacts',
'servicecatalog:ListProvisioningArtifactsForServiceAction',
'servicecatalog:ListRecordHistory',
'servicecatalog:ListResourcesForTagOption',
'servicecatalog:ListServiceActions',
'servicecatalog:ListServiceActionsForProvisioningArtifact',
'servicecatalog:ListTagOptions',
'servicecatalog:ProvisionProduct',
'servicecatalog:RejectPortfolioShare',
'servicecatalog:ScanProvisionedProducts',
'servicecatalog:SearchProducts',
'servicecatalog:SearchProductsAsAdmin',
'servicecatalog:SearchProvisionedProducts',
'servicecatalog:TerminateProvisionedProduct',
'servicecatalog:UpdateConstraint',
'servicecatalog:UpdatePortfolio',
'servicecatalog:UpdateProduct',
'servicecatalog:UpdateProvisionedProduct',
'servicecatalog:UpdateProvisioningArtifact',
'servicecatalog:UpdateServiceAction',
'servicecatalog:UpdateTagOption',
'servicequotas:AssociateServiceQuotaTemplate',
'servicequotas:DeleteServiceQuotaIncreaseRequestFromTemplate',
'servicequotas:DisassociateServiceQuotaTemplate',
'servicequotas:GetAWSDefaultServiceQuota',
'servicequotas:GetAssociationForServiceQuotaTemplate',
'servicequotas:GetRequestedServiceQuotaChange',
'servicequotas:GetServiceQuota',
'servicequotas:GetServiceQuotaIncreaseRequestFromTemplate',
'servicequotas:ListAWSDefaultServiceQuotas',
'servicequotas:ListRequestedServiceQuotaChangeHistory',
'servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota',
'servicequotas:ListServiceQuotaIncreaseRequestsInTemplate',
'servicequotas:ListServiceQuotas',
'servicequotas:ListServices',
'servicequotas:PutServiceQuotaIncreaseRequestIntoTemplate',
'servicequotas:RequestServiceQuotaIncrease',
'ses:CloneReceiptRuleSet',
'ses:CreateConfigurationSet',
'ses:CreateConfigurationSetEventDestination',
'ses:CreateConfigurationSetTrackingOptions',
'ses:CreateCustomVerificationEmailTemplate',
'ses:CreateReceiptFilter',
'ses:CreateReceiptRule',
'ses:CreateReceiptRuleSet',
'ses:CreateTemplate',
'ses:DeleteConfigurationSet',
'ses:DeleteConfigurationSetEventDestination',
'ses:DeleteConfigurationSetTrackingOptions',
'ses:DeleteCustomVerificationEmailTemplate',
'ses:DeleteIdentity',
'ses:DeleteIdentityPolicy',
'ses:DeleteReceiptFilter',
'ses:DeleteReceiptRule',
'ses:DeleteReceiptRuleSet',
'ses:DeleteTemplate',
'ses:DeleteVerifiedEmailAddress',
'ses:DescribeActiveReceiptRuleSet',
'ses:DescribeConfigurationSet',
'ses:DescribeReceiptRule',
'ses:DescribeReceiptRuleSet',
'ses:GetAccountSendingEnabled',
'ses:GetCustomVerificationEmailTemplate',
'ses:GetIdentityDkimAttributes',
'ses:GetIdentityMailFromDomainAttributes',
'ses:GetIdentityNotificationAttributes',
'ses:GetIdentityPolicies',
'ses:GetIdentityVerificationAttributes',
'ses:GetSendQuota',
'ses:GetSendStatistics',
'ses:GetTemplate',
'ses:ListConfigurationSets',
'ses:ListCustomVerificationEmailTemplates',
'ses:ListIdentities',
'ses:ListIdentityPolicies',
'ses:ListReceiptFilters',
'ses:ListReceiptRuleSets',
'ses:ListTemplates',
'ses:ListVerifiedEmailAddresses',
'ses:PutIdentityPolicy',
'ses:ReorderReceiptRuleSet',
'ses:SendBounce',
'ses:SendBulkTemplatedEmail',
'ses:SendCustomVerificationEmail',
'ses:SendEmail',
'ses:SendRawEmail',
'ses:SendTemplatedEmail',
'ses:SetActiveReceiptRuleSet',
'ses:SetIdentityDkimEnabled',
'ses:SetIdentityFeedbackForwardingEnabled',
'ses:SetIdentityHeadersInNotificationsEnabled',
'ses:SetIdentityMailFromDomain',
'ses:SetIdentityNotificationTopic',
'ses:SetReceiptRulePosition',
'ses:TestRenderTemplate',
'ses:UpdateAccountSendingEnabled',
'ses:UpdateConfigurationSetEventDestination',
'ses:UpdateConfigurationSetReputationMetricsEnabled',
'ses:UpdateConfigurationSetSendingEnabled',
'ses:UpdateConfigurationSetTrackingOptions',
'ses:UpdateCustomVerificationEmailTemplate',
'ses:UpdateReceiptRule',
'ses:UpdateTemplate',
'ses:VerifyDomainDkim',
'ses:VerifyDomainIdentity',
'ses:VerifyEmailAddress',
'ses:VerifyEmailIdentity',
'ssmmessages:CreateControlChannel',
'ssmmessages:CreateDataChannel',
'ssmmessages:OpenControlChannel',
'ssmmessages:OpenDataChannel',
'shield:AssociateDRTLogBucket',
'shield:AssociateDRTRole',
'shield:CreateProtection',
'shield:CreateSubscription',
'shield:DeleteProtection',
'shield:DeleteSubscription',
'shield:DescribeAttack',
'shield:DescribeDRTAccess',
'shield:DescribeEmergencyContactSettings',
'shield:DescribeProtection',
'shield:DescribeSubscription',
'shield:DisassociateDRTLogBucket',
'shield:DisassociateDRTRole',
'shield:GetSubscriptionState',
'shield:ListAttacks',
'shield:ListProtections',
'shield:UpdateEmergencyContactSettings',
'swf:CancelTimer',
'swf:CancelWorkflowExecution',
'swf:CompleteWorkflowExecution',
'swf:ContinueAsNewWorkflowExecution',
'swf:CountClosedWorkflowExecutions',
'swf:CountOpenWorkflowExecutions',
'swf:CountPendingActivityTasks',
'swf:CountPendingDecisionTasks',
'swf:DeprecateActivityType',
'swf:DeprecateDomain',
'swf:DeprecateWorkflowType',
'swf:DescribeActivityType',
'swf:DescribeDomain',
'swf:DescribeWorkflowExecution',
'swf:DescribeWorkflowType',
'swf:FailWorkflowExecution',
'swf:GetWorkflowExecutionHistory',
'swf:ListActivityTypes',
'swf:ListClosedWorkflowExecutions',
'swf:ListDomains',
'swf:ListOpenWorkflowExecutions',
'swf:ListWorkflowTypes',
'swf:PollForActivityTask',
'swf:PollForDecisionTask',
'swf:RecordActivityTaskHeartbeat',
'swf:RecordMarker',
'swf:RegisterActivityType',
'swf:RegisterDomain',
'swf:RegisterWorkflowType',
'swf:RequestCancelActivityTask',
'swf:RequestCancelExternalWorkflowExecution',
'swf:RequestCancelWorkflowExecution',
'swf:RespondActivityTaskCanceled',
'swf:RespondActivityTaskCompleted',
'swf:RespondActivityTaskFailed',
'swf:RespondDecisionTaskCompleted',
'swf:ScheduleActivityTask',
'swf:SignalExternalWorkflowExecution',
'swf:SignalWorkflowExecution',
'swf:StartChildWorkflowExecution',
'swf:StartTimer',
'swf:StartWorkflowExecution',
'swf:TerminateWorkflowExecution',
'sdb:BatchDeleteAttributes',
'sdb:BatchPutAttributes',
'sdb:CreateDomain',
'sdb:DeleteAttributes',
'sdb:DeleteDomain',
'sdb:DomainMetadata',
'sdb:GetAttributes',
'sdb:ListDomains',
'sdb:PutAttributes',
'sdb:Select',
'snowball:CancelCluster',
'snowball:CancelJob',
'snowball:CreateAddress',
'snowball:CreateCluster',
'snowball:CreateJob',
'snowball:DescribeAddress',
'snowball:DescribeAddresses',
'snowball:DescribeCluster',
'snowball:DescribeJob',
'snowball:GetJobManifest',
'snowball:GetJobUnlockCode',
'snowball:GetSnowballUsage',
'snowball:ListClusterJobs',
'snowball:ListClusters',
'snowball:ListJobs',
'snowball:UpdateCluster',
'snowball:UpdateJob',
'sns:AddPermission',
'sns:CheckIfPhoneNumberIsOptedOut',
'sns:ConfirmSubscription',
'sns:CreatePlatformApplication',
'sns:CreatePlatformEndpoint',
'sns:CreateTopic',
'sns:DeleteEndpoint',
'sns:DeletePlatformApplication',
'sns:DeleteTopic',
'sns:GetEndpointAttributes',
'sns:GetPlatformApplicationAttributes',
'sns:GetSMSAttributes',
'sns:GetSubscriptionAttributes',
'sns:GetTopicAttributes',
'sns:ListEndpointsByPlatformApplication',
'sns:ListPhoneNumbersOptedOut',
'sns:ListPlatformApplications',
'sns:ListSubscriptions',
'sns:ListSubscriptionsByTopic',
'sns:ListTopics',
'sns:OptInPhoneNumber',
'sns:Publish',
'sns:RemovePermission',
'sns:SetEndpointAttributes',
'sns:SetPlatformApplicationAttributes',
'sns:SetSubscriptionAttributes',
'sns:SetTopicAttributes',
'sns:Subscribe',
'sns:Unsubscribe',
'sqs:AddPermission',
'sqs:ChangeMessageVisibility',
'sqs:ChangeMessageVisibilityBatch',
'sqs:CreateQueue',
'sqs:DeleteMessage',
'sqs:DeleteMessageBatch',
'sqs:DeleteQueue',
'sqs:GetQueueAttributes',
'sqs:GetQueueUrl',
'sqs:ListDeadLetterSourceQueues',
'sqs:ListQueueTags',
'sqs:ListQueues',
'sqs:PurgeQueue',
'sqs:ReceiveMessage',
'sqs:RemovePermission',
'sqs:SendMessage',
'sqs:SendMessageBatch',
'sqs:SetQueueAttributes',
'sqs:TagQueue',
'sqs:UntagQueue',
'sso:AddMemberToGroup',
'sso:AssociateDirectory',
'sso:AssociateProfile',
'sso:CreateAlias',
'sso:CreateApplicationInstance',
'sso:CreateApplicationInstanceCertificate',
'sso:CreateGroup',
'sso:CreatePermissionSet',
'sso:CreateProfile',
'sso:CreateTrust',
'sso:CreateUser',
'sso:DeleteApplicationInstance',
'sso:DeleteApplicationInstanceCertificate',
'sso:DeleteGroup',
'sso:DeletePermissionSet',
'sso:DeletePermissionsPolicy',
'sso:DeleteProfile',
'sso:DeleteUser',
'sso:DescribeGroups',
'sso:DescribePermissionsPolicies',
'sso:DescribeUsers',
'sso:DisableUser',
'sso:DisassociateDirectory',
'sso:DisassociateProfile',
'sso:EnableUser',
'sso:GetApplicationInstance',
'sso:GetApplicationTemplate',
'sso:GetPermissionSet',
'sso:GetPermissionsPolicy',
'sso:GetProfile',
'sso:GetSSOConfiguration',
'sso:GetSSOStatus',
'sso:GetTrust',
'sso:GetUserPoolInfo',
'sso:ImportApplicationInstanceServiceProviderMetadata',
'sso:ListApplicationInstanceCertificates',
'sso:ListApplicationInstances',
'sso:ListApplicationTemplates',
'sso:ListApplications',
'sso:ListDirectoryAssociations',
'sso:ListGroupsForUser',
'sso:ListMembersInGroup',
'sso:ListPermissionSets',
'sso:ListProfileAssociations',
'sso:ListProfiles',
'sso:PutPermissionsPolicy',
'sso:RemoveMemberFromGroup',
'sso:SearchGroups',
'sso:SearchUsers',
'sso:SetTemporaryPassword',
'sso:StartSSO',
'sso:UpdateApplicationInstanceActiveCertificate',
'sso:UpdateApplicationInstanceDisplayData',
'sso:UpdateApplicationInstanceResponseConfiguration',
'sso:UpdateApplicationInstanceResponseSchemaConfiguration',
'sso:UpdateApplicationInstanceSecurityConfiguration',
'sso:UpdateApplicationInstanceServiceProviderConfiguration',
'sso:UpdateApplicationInstanceStatus',
'sso:UpdateDirectoryAssociation',
'sso:UpdateGroup',
'sso:UpdatePermissionSet',
'sso:UpdateProfile',
'sso:UpdateSSOConfiguration',
'sso:UpdateTrust',
'sso:UpdateUser',
'sso-directory:AddMemberToGroup',
'sso-directory:CreateAlias',
'sso-directory:CreateGroup',
'sso-directory:CreateUser',
'sso-directory:DeleteGroup',
'sso-directory:DeleteUser',
'sso-directory:DescribeDirectory',
'sso-directory:DescribeGroups',
'sso-directory:DescribeUsers',
'sso-directory:DisableUser',
'sso-directory:EnableUser',
'sso-directory:ListGroupsForUser',
'sso-directory:ListMembersInGroup',
'sso-directory:RemoveMemberFromGroup',
'sso-directory:UpdateGroup',
'sso-directory:UpdatePassword',
'sso-directory:UpdateUser',
'sso-directory:VerifyEmail',
'states:CreateActivity',
'states:CreateStateMachine',
'states:DeleteActivity',
'states:DeleteStateMachine',
'states:DescribeActivity',
'states:DescribeExecution',
'states:DescribeStateMachine',
'states:DescribeStateMachineForExecution',
'states:GetActivityTask',
'states:GetExecutionHistory',
'states:ListActivities',
'states:ListExecutions',
'states:ListStateMachines',
'states:ListTagsForResource',
'states:SendTaskFailure',
'states:SendTaskHeartbeat',
'states:SendTaskSuccess',
'states:StartExecution',
'states:StopExecution',
'states:TagResource',
'states:UntagResource',
'states:UpdateStateMachine',
'storagegateway:ActivateGateway',
'storagegateway:AddCache',
'storagegateway:AddTagsToResource',
'storagegateway:AddUploadBuffer',
'storagegateway:AddWorkingStorage',
'storagegateway:AttachVolume',
'storagegateway:CancelArchival',
'storagegateway:CancelRetrieval',
'storagegateway:CreateCachediSCSIVolume',
'storagegateway:CreateNFSFileShare',
'storagegateway:CreateSMBFileShare',
'storagegateway:CreateSnapshot',
'storagegateway:CreateSnapshotFromVolumeRecoveryPoint',
'storagegateway:CreateStorediSCSIVolume',
'storagegateway:CreateTapeWithBarcode',
'storagegateway:CreateTapes',
'storagegateway:DeleteBandwidthRateLimit',
'storagegateway:DeleteChapCredentials',
'storagegateway:DeleteFileShare',
'storagegateway:DeleteGateway',
'storagegateway:DeleteSnapshotSchedule',
'storagegateway:DeleteTape',
'storagegateway:DeleteTapeArchive',
'storagegateway:DeleteVolume',
'storagegateway:DescribeBandwidthRateLimit',
'storagegateway:DescribeCache',
'storagegateway:DescribeCachediSCSIVolumes',
'storagegateway:DescribeChapCredentials',
'storagegateway:DescribeGatewayInformation',
'storagegateway:DescribeMaintenanceStartTime',
'storagegateway:DescribeNFSFileShares',
'storagegateway:DescribeSMBFileShares',
'storagegateway:DescribeSMBSettings',
'storagegateway:DescribeSnapshotSchedule',
'storagegateway:DescribeStorediSCSIVolumes',
'storagegateway:DescribeTapeArchives',
'storagegateway:DescribeTapeRecoveryPoints',
'storagegateway:DescribeTapes',
'storagegateway:DescribeUploadBuffer',
'storagegateway:DescribeVTLDevices',
'storagegateway:DescribeWorkingStorage',
'storagegateway:DetachVolume',
'storagegateway:DisableGateway',
'storagegateway:JoinDomain',
'storagegateway:ListFileShares',
'storagegateway:ListGateways',
'storagegateway:ListLocalDisks',
'storagegateway:ListTagsForResource',
'storagegateway:ListTapes',
'storagegateway:ListVolumeInitiators',
'storagegateway:ListVolumeRecoveryPoints',
'storagegateway:ListVolumes',
'storagegateway:NotifyWhenUploaded',
'storagegateway:RefreshCache',
'storagegateway:RemoveTagsFromResource',
'storagegateway:ResetCache',
'storagegateway:RetrieveTapeArchive',
'storagegateway:RetrieveTapeRecoveryPoint',
'storagegateway:SetLocalConsolePassword',
'storagegateway:SetSMBGuestPassword',
'storagegateway:ShutdownGateway',
'storagegateway:StartGateway',
'storagegateway:UpdateBandwidthRateLimit',
'storagegateway:UpdateChapCredentials',
'storagegateway:UpdateGatewayInformation',
'storagegateway:UpdateGatewaySoftwareNow',
'storagegateway:UpdateMaintenanceStartTime',
'storagegateway:UpdateNFSFileShare',
'storagegateway:UpdateSMBFileShare',
'storagegateway:UpdateSnapshotSchedule',
'storagegateway:UpdateVTLDeviceType',
'sumerian:Login',
'sumerian:ViewRelease',
'support:AddAttachmentsToSet',
'support:AddCommunicationToCase',
'support:CreateCase',
'support:DescribeAttachment',
'support:DescribeCases',
'support:DescribeCommunications',
'support:DescribeServices',
'support:DescribeSeverityLevels',
'support:DescribeTrustedAdvisorCheckRefreshStatuses',
'support:DescribeTrustedAdvisorCheckResult',
'support:DescribeTrustedAdvisorCheckSummaries',
'support:DescribeTrustedAdvisorChecks',
'support:RefreshTrustedAdvisorCheck',
'support:ResolveCase',
'ssm:AddTagsToResource',
'ssm:CancelCommand',
'ssm:CancelMaintenanceWindowExecution',
'ssm:CreateActivation',
'ssm:CreateAssociation',
'ssm:CreateAssociationBatch',
'ssm:CreateDocument',
'ssm:CreateMaintenanceWindow',
'ssm:CreatePatchBaseline',
'ssm:CreateResourceDataSync',
'ssm:DeleteActivation',
'ssm:DeleteAssociation',
'ssm:DeleteDocument',
'ssm:DeleteInventory',
'ssm:DeleteMaintenanceWindow',
'ssm:DeleteParameter',
'ssm:DeleteParameters',
'ssm:DeletePatchBaseline',
'ssm:DeleteResourceDataSync',
'ssm:DeregisterManagedInstance',
'ssm:DeregisterPatchBaselineForPatchGroup',
'ssm:DeregisterTargetFromMaintenanceWindow',
'ssm:DeregisterTaskFromMaintenanceWindow',
'ssm:DescribeActivations',
'ssm:DescribeAssociation',
'ssm:DescribeAssociationExecutionTargets',
'ssm:DescribeAssociationExecutions',
'ssm:DescribeAvailablePatches',
'ssm:DescribeDocument',
'ssm:DescribeDocumentParameters',
'ssm:DescribeDocumentPermission',
'ssm:DescribeEffectivePatchesForPatchBaseline',
'ssm:DescribeInstanceInformation',
'ssm:DescribeInstancePatchStates',
'ssm:DescribeInstancePatchStatesForPatchGroup',
'ssm:DescribeInstancePatches',
'ssm:DescribeInstanceProperties',
'ssm:DescribeInventoryDeletions',
'ssm:DescribeMaintenanceWindowExecutionTaskInvocations',
'ssm:DescribeMaintenanceWindowExecutionTasks',
'ssm:DescribeMaintenanceWindowExecutions',
'ssm:DescribeMaintenanceWindowSchedule',
'ssm:DescribeMaintenanceWindowTargets',
'ssm:DescribeMaintenanceWindowTasks',
'ssm:DescribeMaintenanceWindows',
'ssm:DescribeMaintenanceWindowsForTarget',
'ssm:DescribeParameters',
'ssm:DescribePatchBaselines',
'ssm:DescribePatchGroupState',
'ssm:DescribePatchGroups',
'ssm:DescribeSessions',
'ssm:GetAutomationExecution',
'ssm:GetConnectionStatus',
'ssm:GetDefaultPatchBaseline',
'ssm:GetDeployablePatchSnapshotForInstance',
'ssm:GetDocument',
'ssm:GetMaintenanceWindow',
'ssm:GetMaintenanceWindowExecution',
'ssm:GetMaintenanceWindowExecutionTask',
'ssm:GetMaintenanceWindowExecutionTaskInvocation',
'ssm:GetMaintenanceWindowTask',
'ssm:GetManifest',
'ssm:GetParameter',
'ssm:GetParameterHistory',
'ssm:GetParameters',
'ssm:GetParametersByPath',
'ssm:GetPatchBaseline',
'ssm:GetPatchBaselineForPatchGroup',
'ssm:LabelParameterVersion',
'ssm:ListAssociationVersions',
'ssm:ListAssociations',
'ssm:ListCommandInvocations',
'ssm:ListCommands',
'ssm:ListComplianceItems',
'ssm:ListComplianceSummaries',
'ssm:ListDocuments',
'ssm:ListResourceComplianceSummaries',
'ssm:ListTagsForResource',
'ssm:ModifyDocumentPermission',
'ssm:PutComplianceItems',
'ssm:PutConfigurePackageResult',
'ssm:PutParameter',
'ssm:RegisterDefaultPatchBaseline',
'ssm:RegisterPatchBaselineForPatchGroup',
'ssm:RegisterTargetWithMaintenanceWindow',
'ssm:RegisterTaskWithMaintenanceWindow',
'ssm:RemoveTagsFromResource',
'ssm:ResumeSession',
'ssm:SendAutomationSignal',
'ssm:SendCommand',
'ssm:StartAutomationExecution',
'ssm:StartSession',
'ssm:StopAutomationExecution',
'ssm:TerminateSession',
'ssm:UpdateAssociationStatus',
'ssm:UpdateInstanceInformation',
'ssm:UpdateMaintenanceWindow',
'ssm:UpdateMaintenanceWindowTarget',
'ssm:UpdateMaintenanceWindowTask',
'ssm:UpdateManagedInstanceRole',
'ssm:UpdatePatchBaseline',
'textract:AnalyzeDocument',
'textract:DetectDocumentText',
'textract:GetDocumentAnalysis',
'textract:GetDocumentTextDetection',
'textract:StartDocumentAnalysis',
'textract:StartDocumentTextDetection',
'transcribe:CreateVocabulary',
'transcribe:DeleteTranscriptionJob',
'transcribe:DeleteVocabulary',
'transcribe:GetTranscriptionJob',
'transcribe:GetVocabulary',
'transcribe:ListTranscriptionJobs',
'transcribe:ListVocabularies',
'transcribe:StartStreamTranscription',
'transcribe:StartTranscriptionJob',
'transcribe:UpdateVocabulary',
'transfer:CreateServer',
'transfer:CreateUser',
'transfer:DeleteServer',
'transfer:DeleteSshPublicKey',
'transfer:DeleteUser',
'transfer:DescribeServer',
'transfer:DescribeUser',
'transfer:ImportSshPublicKey',
'transfer:ListServers',
'transfer:ListTagsForResource',
'transfer:ListUsers',
'transfer:StartServer',
'transfer:StopServer',
'transfer:TagResource',
'transfer:TestIdentityProvider',
'transfer:UntagResource',
'transfer:UpdateServer',
'transfer:UpdateUser',
'translate:DeleteTerminology',
'translate:GetTerminology',
'translate:ImportTerminology',
'translate:ListTerminologies',
'translate:TranslateText',
'trustedadvisor:DescribeAccountAccess',
'trustedadvisor:DescribeCheckItems',
'trustedadvisor:DescribeCheckRefreshStatuses',
'trustedadvisor:DescribeCheckSummaries',
'trustedadvisor:DescribeNotificationPreferences',
'trustedadvisor:ExcludeCheckItems',
'trustedadvisor:IncludeCheckItems',
'trustedadvisor:RefreshCheck',
'trustedadvisor:SetAccountAccess',
'trustedadvisor:UpdateNotificationPreferences',
'waf:CreateByteMatchSet',
'waf:CreateGeoMatchSet',
'waf:CreateIPSet',
'waf:CreateRateBasedRule',
'waf:CreateRegexMatchSet',
'waf:CreateRegexPatternSet',
'waf:CreateRule',
'waf:CreateRuleGroup',
'waf:CreateSizeConstraintSet',
'waf:CreateSqlInjectionMatchSet',
'waf:CreateWebACL',
'waf:CreateXssMatchSet',
'waf:DeleteByteMatchSet',
'waf:DeleteGeoMatchSet',
'waf:DeleteIPSet',
'waf:DeleteLoggingConfiguration',
'waf:DeletePermissionPolicy',
'waf:DeleteRateBasedRule',
'waf:DeleteRegexMatchSet',
'waf:DeleteRegexPatternSet',
'waf:DeleteRule',
'waf:DeleteRuleGroup',
'waf:DeleteSizeConstraintSet',
'waf:DeleteSqlInjectionMatchSet',
'waf:DeleteWebACL',
'waf:DeleteXssMatchSet',
'waf:GetByteMatchSet',
'waf:GetChangeToken',
'waf:GetChangeTokenStatus',
'waf:GetGeoMatchSet',
'waf:GetIPSet',
'waf:GetLoggingConfiguration',
'waf:GetPermissionPolicy',
'waf:GetRateBasedRule',
'waf:GetRateBasedRuleManagedKeys',
'waf:GetRegexMatchSet',
'waf:GetRegexPatternSet',
'waf:GetRule',
'waf:GetRuleGroup',
'waf:GetSampledRequests',
'waf:GetSizeConstraintSet',
'waf:GetSqlInjectionMatchSet',
'waf:GetWebACL',
'waf:GetXssMatchSet',
'waf:ListActivatedRulesInRuleGroup',
'waf:ListByteMatchSets',
'waf:ListGeoMatchSets',
'waf:ListIPSets',
'waf:ListLoggingConfigurations',
'waf:ListRateBasedRules',
'waf:ListRegexMatchSets',
'waf:ListRegexPatternSets',
'waf:ListRuleGroups',
'waf:ListRules',
'waf:ListSizeConstraintSets',
'waf:ListSqlInjectionMatchSets',
'waf:ListSubscribedRuleGroups',
'waf:ListWebACLs',
'waf:ListXssMatchSets',
'waf:PutLoggingConfiguration',
'waf:PutPermissionPolicy',
'waf:UpdateByteMatchSet',
'waf:UpdateGeoMatchSet',
'waf:UpdateIPSet',
'waf:UpdateRateBasedRule',
'waf:UpdateRegexMatchSet',
'waf:UpdateRegexPatternSet',
'waf:UpdateRule',
'waf:UpdateRuleGroup',
'waf:UpdateSizeConstraintSet',
'waf:UpdateSqlInjectionMatchSet',
'waf:UpdateWebACL',
'waf:UpdateXssMatchSet',
'waf-regional:AssociateWebACL',
'waf-regional:CreateByteMatchSet',
'waf-regional:CreateGeoMatchSet',
'waf-regional:CreateIPSet',
'waf-regional:CreateRateBasedRule',
'waf-regional:CreateRegexMatchSet',
'waf-regional:CreateRegexPatternSet',
'waf-regional:CreateRule',
'waf-regional:CreateRuleGroup',
'waf-regional:CreateSizeConstraintSet',
'waf-regional:CreateSqlInjectionMatchSet',
'waf-regional:CreateWebACL',
'waf-regional:CreateXssMatchSet',
'waf-regional:DeleteByteMatchSet',
'waf-regional:DeleteGeoMatchSet',
'waf-regional:DeleteIPSet',
'waf-regional:DeleteLoggingConfiguration',
'waf-regional:DeletePermissionPolicy',
'waf-regional:DeleteRateBasedRule',
'waf-regional:DeleteRegexMatchSet',
'waf-regional:DeleteRegexPatternSet',
'waf-regional:DeleteRule',
'waf-regional:DeleteRuleGroup',
'waf-regional:DeleteSizeConstraintSet',
'waf-regional:DeleteSqlInjectionMatchSet',
'waf-regional:DeleteWebACL',
'waf-regional:DeleteXssMatchSet',
'waf-regional:DisassociateWebACL',
'waf-regional:GetByteMatchSet',
'waf-regional:GetChangeToken',
'waf-regional:GetChangeTokenStatus',
'waf-regional:GetGeoMatchSet',
'waf-regional:GetIPSet',
'waf-regional:GetLoggingConfiguration',
'waf-regional:GetPermissionPolicy',
'waf-regional:GetRateBasedRule',
'waf-regional:GetRateBasedRuleManagedKeys',
'waf-regional:GetRegexMatchSet',
'waf-regional:GetRegexPatternSet',
'waf-regional:GetRule',
'waf-regional:GetRuleGroup',
'waf-regional:GetSampledRequests',
'waf-regional:GetSizeConstraintSet',
'waf-regional:GetSqlInjectionMatchSet',
'waf-regional:GetWebACL',
'waf-regional:GetWebACLForResource',
'waf-regional:GetXssMatchSet',
'waf-regional:ListActivatedRulesInRuleGroup',
'waf-regional:ListByteMatchSets',
'waf-regional:ListGeoMatchSets',
'waf-regional:ListIPSets',
'waf-regional:ListLoggingConfigurations',
'waf-regional:ListRateBasedRules',
'waf-regional:ListRegexMatchSets',
'waf-regional:ListRegexPatternSets',
'waf-regional:ListResourcesForWebACL',
'waf-regional:ListRuleGroups',
'waf-regional:ListRules',
'waf-regional:ListSizeConstraintSets',
'waf-regional:ListSqlInjectionMatchSets',
'waf-regional:ListSubscribedRuleGroups',
'waf-regional:ListWebACLs',
'waf-regional:ListXssMatchSets',
'waf-regional:PutLoggingConfiguration',
'waf-regional:PutPermissionPolicy',
'waf-regional:UpdateByteMatchSet',
'waf-regional:UpdateGeoMatchSet',
'waf-regional:UpdateIPSet',
'waf-regional:UpdateRateBasedRule',
'waf-regional:UpdateRegexMatchSet',
'waf-regional:UpdateRegexPatternSet',
'waf-regional:UpdateRule',
'waf-regional:UpdateRuleGroup',
'waf-regional:UpdateSizeConstraintSet',
'waf-regional:UpdateSqlInjectionMatchSet',
'waf-regional:UpdateWebACL',
'waf-regional:UpdateXssMatchSet',
'wellarchitected:CreateWorkload',
'wellarchitected:GetWorkload',
'wellarchitected:ListWorkloads',
'workdocs:AbortDocumentVersionUpload',
'workdocs:ActivateUser',
'workdocs:AddResourcePermissions',
'workdocs:AddUserToGroup[permission only]',
'workdocs:CheckAlias[permission only]',
'workdocs:CreateComment',
'workdocs:CreateCustomMetadata',
'workdocs:CreateFolder',
'workdocs:CreateInstance[permission only]',
'workdocs:CreateLabels',
'workdocs:CreateNotificationSubscription',
'workdocs:CreateUser',
'workdocs:DeactivateUser',
'workdocs:DeleteComment',
'workdocs:DeleteCustomMetadata',
'workdocs:DeleteDocument',
'workdocs:DeleteFolder',
'workdocs:DeleteFolderContents',
'workdocs:DeleteInstance[permission only]',
'workdocs:DeleteLabels',
'workdocs:DeleteNotificationSubscription',
'workdocs:DeleteUser',
'workdocs:DeregisterDirectory[permission only]',
'workdocs:DescribeActivities',
'workdocs:DescribeAvailableDirectories[permission only]',
'workdocs:DescribeComments',
'workdocs:DescribeDocumentVersions',
'workdocs:DescribeFolderContents',
'workdocs:DescribeGroups',
'workdocs:DescribeInstances[permission only]',
'workdocs:DescribeNotificationSubscriptions',
'workdocs:DescribeResourcePermissions',
'workdocs:DescribeRootFolders',
'workdocs:DescribeUsers',
'workdocs:DownloadDocumentVersion[permission only]',
'workdocs:GetCurrentUser',
'workdocs:GetDocument',
'workdocs:GetDocumentPath',
'workdocs:GetDocumentVersion',
'workdocs:GetFolder',
'workdocs:GetFolderPath',
'workdocs:GetResources',
'workdocs:InitiateDocumentVersionUpload',
'workdocs:RegisterDirectory[permission only]',
'workdocs:RemoveAllResourcePermissions',
'workdocs:RemoveResourcePermission',
'workdocs:UpdateDocument',
'workdocs:UpdateDocumentVersion',
'workdocs:UpdateFolder',
'workdocs:UpdateInstanceAlias[permission only]',
'workdocs:UpdateUser',
'worklink:AssociateWebsiteCertificateAuthority',
'worklink:CreateFleet',
'worklink:DeleteFleet',
'worklink:DescribeCompanyNetworkConfiguration',
'worklink:DescribeDevice',
'worklink:DescribeDevicePolicyConfiguration',
'worklink:DescribeFleetMetadata',
'worklink:DescribeIdentityProviderConfiguration',
'worklink:DescribeWebsiteCertificateAuthority',
'worklink:DisassociateWebsiteCertificateAuthority',
'worklink:ListDevices',
'worklink:ListFleets',
'worklink:ListWebsiteCertificateAuthorities',
'worklink:SignOutUser',
'worklink:UpdateCompanyNetworkConfiguration',
'worklink:UpdateDevicePolicyConfiguration',
'worklink:UpdateFleetMetadata',
'worklink:UpdateIdentityProviderConfiguration',
'workmail:AddMembersToGroup',
'workmail:CreateGroup',
'workmail:CreateMailDomain',
'workmail:CreateMailUser',
'workmail:CreateOrganization',
'workmail:CreateResource',
'workmail:DeleteMailDomain',
'workmail:DeleteMobileDevice',
'workmail:DeleteOrganization',
'workmail:DescribeDirectories',
'workmail:DescribeKmsKeys',
'workmail:DescribeMailDomains',
'workmail:DescribeMailGroups',
'workmail:DescribeMailUsers',
'workmail:DescribeOrganizations',
'workmail:DisableMailGroups',
'workmail:DisableMailUsers',
'workmail:EnableMailDomain',
'workmail:EnableMailGroups',
'workmail:EnableMailUsers',
'workmail:GetMailDomainDetails',
'workmail:GetMailGroupDetails',
'workmail:GetMailUserDetails',
'workmail:GetMobileDeviceDetails',
'workmail:GetMobileDevicesForUser',
'workmail:GetMobilePolicyDetails',
'workmail:ListMembersInMailGroup',
'workmail:RemoveMembersFromGroup',
'workmail:ResetUserPassword',
'workmail:SearchMembers',
'workmail:SetAdmin',
'workmail:SetDefaultMailDomain',
'workmail:SetMailGroupDetails',
'workmail:SetMailUserDetails',
'workmail:SetMobilePolicyDetails',
'workmail:WipeMobileDevice',
'workspaces:AssociateIpGroups',
'workspaces:AuthorizeIpRules',
'workspaces:CreateIpGroup',
'workspaces:CreateTags',
'workspaces:CreateWorkspaces',
'workspaces:DeleteIpGroup',
'workspaces:DeleteTags',
'workspaces:DeleteWorkspaceImage',
'workspaces:DescribeAccount',
'workspaces:DescribeAccountModifications',
'workspaces:DescribeClientProperties',
'workspaces:DescribeIpGroups',
'workspaces:DescribeTags',
'workspaces:DescribeWorkspaceBundles',
'workspaces:DescribeWorkspaceDirectories',
'workspaces:DescribeWorkspaceImages',
'workspaces:DescribeWorkspaces',
'workspaces:DescribeWorkspacesConnectionStatus',
'workspaces:DisassociateIpGroups',
'workspaces:ImportWorkspaceImage',
'workspaces:ListAvailableManagementCidrRanges',
'workspaces:ModifyAccount',
'workspaces:ModifyClientProperties',
'workspaces:ModifyWorkspaceProperties',
'workspaces:ModifyWorkspaceState',
'workspaces:RebootWorkspaces',
'workspaces:RebuildWorkspaces',
'workspaces:RevokeIpRules',
'workspaces:StartWorkspaces',
'workspaces:StopWorkspaces',
'workspaces:TerminateWorkspaces',
'workspaces:UpdateRulesOfIpGroup',
'wam:AuthenticatePackager',
'xray:BatchGetTraces',
'xray:CreateGroup',
'xray:CreateSamplingRule',
'xray:DeleteGroup',
'xray:DeleteSamplingRule',
'xray:GetEncryptionConfig',
'xray:GetGroup',
'xray:GetGroups',
'xray:GetSamplingRules',
'xray:GetSamplingStatisticSummaries',
'xray:GetSamplingTargets',
'xray:GetServiceGraph',
'xray:GetTimeSeriesServiceStatistics',
'xray:GetTraceGraph',
'xray:GetTraceSummaries',
'xray:PutEncryptionConfig',
'xray:PutTelemetryRecords',
'xray:PutTraceSegments',
'xray:UpdateGroup',
'xray:UpdateSamplingRule'
]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment