Changelog

Amazon Q Business

• qbusiness:DisableAclOnDataSource

AWS End User Messaging Social

• social-messaging:AssociateWhatsAppBusinessAccount
• social-messaging:DeleteWhatsAppMessageMedia
• social-messaging:DisassociateWhatsAppBusinessAccount
• social-messaging:GetLinkedWhatsAppBusinessAccount
• social-messaging:GetLinkedWhatsAppBusinessAccountPhoneNumber
• social-messaging:GetWhatsAppMessageMedia
• social-messaging:ListLinkedWhatsAppBusinessAccounts
• social-messaging:ListTagsForResource
• social-messaging:PostWhatsAppMessageMedia
• social-messaging:PutWhatsAppBusinessAccountEventDestinations
• social-messaging:SendWhatsAppMessage
• social-messaging:TagResource
• social-messaging:UntagResource

AWS Deadline Cloud

• deadline:GetJobTemplate
• deadline:ListJobParameterDefinitions

Amazon Q in Connect

• wisdom:CreateAIAgent
• wisdom:CreateAIAgentVersion
• wisdom:CreateAIPrompt
• wisdom:CreateAIPromptVersion
• wisdom:DeleteAIAgent
• wisdom:DeleteAIAgentVersion
• wisdom:DeleteAIPrompt
• wisdom:DeleteAIPromptVersion
• wisdom:GetAIAgent
• wisdom:GetAIPrompt
• wisdom:ListAIAgentVersions
• wisdom:ListAIAgents
• wisdom:ListAIPromptVersions
• wisdom:ListAIPrompts
• wisdom:RemoveAssistantAIAgent
• wisdom:UpdateAIAgent
• wisdom:UpdateAIPrompt
• wisdom:UpdateAssistantAIAgent
• wisdom:UpdateSessionData

AWS Marketplace Reporting

• aws-marketplace:GetBuyerDashboard

Amazon QuickSight

• quicksight:DescribeQPersonalizationConfiguration
• quicksight:UpdateQPersonalizationConfiguration

AWS Systems Manager GUI Connect

• ssm-guiconnect:ListConnections

AWS B2B Data Interchange

• b2bi:CreateStarterMappingTemplate
• b2bi:TestConversion

Amazon Bedrock

• bedrock:InvokeBuilder
• bedrock:StopIngestionJob

Amazon Route 53 Profiles

• route53profiles:AssociateProfile
• route53profiles:AssociateResourceToProfile
• route53profiles:CreateProfile
• route53profiles:DeleteProfile
• route53profiles:DisassociateProfile
• route53profiles:DisassociateResourceFromProfile
• route53profiles:GetProfile
• route53profiles:GetProfileAssociation
• route53profiles:GetProfilePolicy
• route53profiles:GetProfileResourceAssociation
• route53profiles:ListProfileAssociations
• route53profiles:ListProfileResourceAssociations
• route53profiles:ListProfiles
• route53profiles:ListTagsForResource
• route53profiles:PutProfilePolicy
• route53profiles:TagResource
• route53profiles:UntagResource
• route53profiles:UpdateProfileResourceAssociation

AWS Supply Chain

• scn:CreateDataIntegrationFlow
• scn:CreateDataLakeDataset
• scn:DeleteDataIntegrationFlow
• scn:DeleteDataLakeDataset
• scn:GetDataIntegrationFlow
• scn:GetDataLakeDataset
• scn:GetInstance
• scn:ListDataIntegrationFlows
• scn:ListDataLakeDatasets
• scn:UpdateDataIntegrationFlow
• scn:UpdateDataLakeDataset

AWS IAM Identity Center (successor to AWS Single Sign-On) directory

• sso-directory:GetGroupId
• sso-directory:GetUserId
• sso-directory:ListGroups
• sso-directory:ListUsers

Amazon Pinpoint SMS Voice V2

• sms-voice:DeleteResourcePolicy
• sms-voice:GetResourcePolicy
• sms-voice:PutResourcePolicy

Amazon Q Business Q Apps

• qapps:ExportQAppSessionData
• qapps:ListQAppSessionData

AWS Resource Groups

• resource-groups:CancelTagSyncTask
• resource-groups:GetTagSyncTask
• resource-groups:ListGroupingStatuses
• resource-groups:ListTagSyncTasks
• resource-groups:StartTagSyncTask

AWS Elemental MediaConvert

• mediaconvert:ListVersions

AWS Elemental MediaLive

• medialive:CreateChannelPlacementGroup
• medialive:CreateCluster
• medialive:CreateNetwork
• medialive:CreateNode
• medialive:CreateNodeRegistrationScript
• medialive:DeleteChannelPlacementGroup
• medialive:DeleteCluster
• medialive:DeleteNetwork
• medialive:DeleteNode
• medialive:DescribeChannelPlacementGroup
• medialive:DescribeCluster
• medialive:DescribeNetwork
• medialive:DescribeNode
• medialive:ListChannelPlacementGroups
• medialive:ListClusters
• medialive:ListNetworks
• medialive:ListNodes
• medialive:PollAnywhere
• medialive:SubmitAnywhereStateChange
• medialive:UpdateChannelPlacementGroup
• medialive:UpdateCluster
• medialive:UpdateNetwork
• medialive:UpdateNode
• medialive:UpdateNodeState

AWS Service Catalog

• servicecatalog:DeleteResourcePolicy
• servicecatalog:GetResourcePolicy
• servicecatalog:PutResourcePolicy

Amazon Connect

• connect:CreateHoursOfOperationOverride
• connect:DeleteHoursOfOperationOverride
• connect:DescribeHoursOfOperationOverride
• connect:GetEffectiveHoursOfOperations
• connect:ListHoursOfOperationOverrides
• connect:SearchHoursOfOperationOverrides
• connect:SendOutboundEmail
• connect:UpdateHoursOfOperationOverride

AWS Directory Service

• ds:DescribeDirectoryDataAccess
• ds:DisableDirectoryDataAccess
• ds:EnableDirectoryDataAccess

AWS Directory Service Data

• ds-data:AddGroupMember
• ds-data:CreateGroup
• ds-data:CreateUser
• ds-data:DeleteGroup
• ds-data:DeleteUser
• ds-data:DescribeGroup
• ds-data:DescribeUser
• ds-data:DisableUser
• ds-data:ListGroupMembers
• ds-data:ListGroups
• ds-data:ListGroupsForMember
• ds-data:ListUsers
• ds-data:RemoveGroupMember
• ds-data:SearchGroups
• ds-data:SearchUsers
• ds-data:UpdateGroup
• ds-data:UpdateUser

AWS IoT

• iot:AssociateSbomWithPackageVersion
• iot:DisassociateSbomFromPackageVersion
• iot:ListSbomValidationResults

Amazon S3 Express

• s3express:GetEncryptionConfiguration
• s3express:PutEncryptionConfiguration

AWS Lambda

• lambda:DeleteResourcePolicy
• lambda:GetPublicAccessBlockConfig
• lambda:GetResourcePolicy
• lambda:PutPublicAccessBlockConfig
• lambda:PutResourcePolicy

AWS Directory Service

• ds:AccessDSData

Amazon Personalize

• personalize:UpdateSolution

AWS SQL Workbench

• sqlworkbench:DeleteQCustomContext
• sqlworkbench:GetQCustomContext
• sqlworkbench:GetQSqlPromptQuotas
• sqlworkbench:PutQCustomContext

Amazon Connect Customer Profiles

• profile:BatchGetCalculatedAttributeForProfile
• profile:BatchGetProfile
• profile:CreateSegmentDefinition
• profile:CreateSegmentEstimate
• profile:CreateSegmentSnapshot
• profile:DeleteSegmentDefinition
• profile:GetSegmentDefinition
• profile:GetSegmentEstimate
• profile:GetSegmentMembership
• profile:GetSegmentSnapshot
• profile:ListObjectTypeAttributes
• profile:ListProfileAttributeValues
• profile:ListSegmentDefinitions

Amazon Interactive Video Service

• ivs:CreateIngestConfiguration
• ivs:DeleteIngestConfiguration
• ivs:GetIngestConfiguration
• ivs:ListIngestConfigurations
• ivs:UpdateIngestConfiguration

Amazon Q Business Q Apps

• qapps:UpdateLibraryItemMetadata

Amazon RDS

• rds:CopyCustomDBEngineVersion
• rds:DescribeDBSnapshotTenantDatabases

AWS Support Plans

• supportplans:ListSupportPlanModifiers

Amazon Q in Connect

• wisdom:ActivateMessageTemplate
• wisdom:CreateMessageTemplate
• wisdom:CreateMessageTemplateAttachment
• wisdom:CreateMessageTemplateVersion
• wisdom:DeactivateMessageTemplate
• wisdom:DeleteMessageTemplate
• wisdom:DeleteMessageTemplateAttachment
• wisdom:GetMessageTemplate
• wisdom:ListMessageTemplateVersions
• wisdom:ListMessageTemplates
• wisdom:RenderMessageTemplate
• wisdom:SearchMessageTemplates
• wisdom:UpdateMessageTemplate
• wisdom:UpdateMessageTemplateMetadata

AWS AppConfig

• appconfig:GetAccountSettings
• appconfig:UpdateAccountSettings

Amazon CloudWatch Logs

• logs:DescribeConfigurationTemplates
• logs:UpdateDeliveryConfiguration

Amazon EC2

• ec2:CreateCapacityReservationBySplitting
• ec2:MoveCapacityReservationInstances

AWS Elastic Load Balancing V2

• elasticloadbalancing:DescribeListenerAttributes
• elasticloadbalancing:ModifyListenerAttributes

Amazon S3

• s3:ListCallerAccessGrants

AWS Fault Injection Service

• fis:GetSafetyLever
• fis:UpdateSafetyLeverState

Amazon QuickSight

• quicksight:ListFoldersForResource

Amazon Bedrock

• bedrock:CreateModelImportJob
• bedrock:DeleteImportedModel
• bedrock:GetImportedModel
• bedrock:GetInferenceProfile
• bedrock:GetModelImportJob
• bedrock:ListImportedModels
• bedrock:ListInferenceProfiles
• bedrock:ListModelImportJobs

AWS Parallel Computing Service

• pcs:AllowVendedLogDeliveryForResource
• pcs:CreateCluster
• pcs:CreateComputeNodeGroup
• pcs:CreateQueue
• pcs:DeleteCluster
• pcs:DeleteComputeNodeGroup
• pcs:DeleteQueue
• pcs:GetCluster
• pcs:GetComputeNodeGroup
• pcs:GetQueue
• pcs:ListClusters
• pcs:ListComputeNodeGroups
• pcs:ListQueues
• pcs:ListTagsForResource
• pcs:RegisterComputeNodeGroupInstance
• pcs:TagResource
• pcs:UntagResource
• pcs:UpdateComputeNodeGroup
• pcs:UpdateQueue

AWS Wickr

• wickr:DeleteNetwork

Amazon Elastic Container Registry

• ecr:GetAccountSetting
• ecr:PutAccountSetting

Amazon AppStream 2.0

• appstream:CreateThemeForStack
• appstream:DeleteThemeForStack
• appstream:DescribeThemeForStack
• appstream:UpdateThemeForStack

AWS CodeConnections

• codeconnections:GetConnectionToken

AWS CodeStar Connections

• codestar-connections:GetConnectionToken

Amazon DataZone

• datazone:CreateProjectProfile
• datazone:DeleteProjectProfile
• datazone:GetProjectProfile
• datazone:ListProjectProfiles
• datazone:UpdateProjectProfile

AWS HealthLake

• healthlake:CancelFHIRExportJobWithDelete
• healthlake:DescribeFHIRExportJobWithGet
• healthlake:StartFHIRExportJobWithPost

AWS Lambda

• lambda:GetFunctionRecursionConfig
• lambda:PutFunctionRecursionConfig

AWS Glue

• glue:GetRecipeAction
• glue:SendRecipeAction

Amazon Kinesis Analytics V2

• kinesisanalytics:DescribeApplicationOperation
• kinesisanalytics:ListApplicationOperations

Amazon Route 53 Profiles enables sharing DNS settings with VPCs

• route53profiles:GetProfilePolicy
• route53profiles:PutProfilePolicy

Amazon Bedrock

• bedrock:DeleteResourcePolicy
• bedrock:GetResourcePolicy
• bedrock:PutResourcePolicy

Amazon EC2

• ec2:CreateIpamExternalResourceVerificationToken
• ec2:DeleteIpamExternalResourceVerificationToken
• ec2:DescribeIpamExternalResourceVerificationTokens

Amazon AppIntegrations

• app-integrations:UpdateDataIntegrationAssociation

AWS Glue

• glue:PutDataQualityStatisticAnnotation

Amazon Kinesis Video Streams

• kinesisvideo:JoinStorageSessionAsViewer

AWS Elemental Appliances and Software Activation Service

• elemental-activations:ConfirmAccount
• elemental-activations:DownloadKickstart
• elemental-activations:GenerateLicense
• elemental-activations:GetArtifactGroupSoftwareVersions
• elemental-activations:GetAsset
• elemental-activations:GetAssets
• elemental-activations:GetProductAdvisories
• elemental-activations:GetSoftwareVersions

Amazon Bedrock

• bedrock:BatchDeleteEvaluationJob

AWS CodePipeline

• codepipeline:ListRuleExecutions
• codepipeline:ListRuleTypes
• codepipeline:OverrideStageCondition

AWS Control Catalog

• controlcatalog:GetControl
• controlcatalog:ListControls

Amazon DataZone

• datazone:AddEntityOwner
• datazone:CreateDataProduct
• datazone:CreateDataProductRevision
• datazone:CreateDomainUnit
• datazone:DeleteDataProduct
• datazone:DeleteDomainUnit
• datazone:GetDataProduct
• datazone:GetDomainUnit
• datazone:ListDataProductRevisions
• datazone:ListDomainUnitsForParent
• datazone:ListEntityOwners
• datazone:RemoveEntityOwner
• datazone:UpdateDomainUnit

Amazon Bedrock

• bedrock:CreateModelCopyJob
• bedrock:GetModelCopyJob
• bedrock:ListModelCopyJobs

AWS Resilience Hub

• resiliencehub:AcceptResourceGroupingRecommendations
• resiliencehub:DescribeResourceGroupingRecommendationTask
• resiliencehub:ListResourceGroupingRecommendations
• resiliencehub:RejectResourceGroupingRecommendations
• resiliencehub:StartResourceGroupingRecommendationTask

Amazon Route 53 Application Recovery Controller - Zonal Shift

• arc-zonal-shift:GetAutoshiftObserverNotificationStatus
• arc-zonal-shift:UpdateAutoshiftObserverNotificationStatus

AWS Customer Verification Service

• customer-verification:CreateUploadUrls

AWS Elastic Load Balancing V2

• elasticloadbalancing:DeleteSharedTrustStoreAssociation
• elasticloadbalancing:GetResourcePolicy

AWS Clean Rooms

• cleanrooms:CreateConfiguredTableAssociationAnalysisRule
• cleanrooms:DeleteConfiguredTableAssociationAnalysisRule
• cleanrooms:GetConfiguredTableAssociationAnalysisRule
• cleanrooms:UpdateConfiguredTableAssociationAnalysisRule

Amazon Elastic Container Registry

• ecr:DescribeRepositoryCreationTemplates
• ecr:UpdateRepositoryCreationTemplate

AWS Clean Rooms

• cleanrooms:CreateIdMappingTable
• cleanrooms:CreateIdNamespaceAssociation
• cleanrooms:DeleteIdMappingTable
• cleanrooms:DeleteIdNamespaceAssociation
• cleanrooms:GetCollaborationIdNamespaceAssociation
• cleanrooms:GetIdMappingTable
• cleanrooms:GetIdNamespaceAssociation
• cleanrooms:ListCollaborationIdNamespaceAssociations
• cleanrooms:ListIdMappingTables
• cleanrooms:ListIdNamespaceAssociations
• cleanrooms:PopulateIdMappingTable
• cleanrooms:UpdateIdMappingTable
• cleanrooms:UpdateIdNamespaceAssociation

AWS Entity Resolution

• entityresolution:UseWorkflow

Amazon SageMaker

• sagemaker:DeleteOptimizationJob

Amazon WorkMail

• workmail:DeliverToMailbox

Amazon Connect

• connect:SearchAgentStatuses
• connect:SearchUserHierarchyGroups

Amazon QuickSight

• quicksight:BatchCreateTopicReviewedAnswer
• quicksight:BatchDeleteTopicReviewedAnswer
• quicksight:ListTopicReviewedAnswers

AWS Resource Explorer

• resource-explorer-2:DeleteResourcePolicy
• resource-explorer-2:GetResourcePolicy
• resource-explorer-2:PutResourcePolicy

Amazon Interactive Video Service

• ivs:DeletePublicKey
• ivs:GetPublicKey
• ivs:ImportPublicKey
• ivs:ListPublicKeys

Amazon Bedrock

• bedrock:CreateFlow
• bedrock:CreateFlowAlias
• bedrock:CreateFlowVersion
• bedrock:CreatePrompt
• bedrock:CreatePromptVersion
• bedrock:DeleteAgentMemory
• bedrock:DeleteFlow
• bedrock:DeleteFlowAlias
• bedrock:DeleteFlowVersion
• bedrock:DeletePrompt
• bedrock:GetAgentMemory
• bedrock:GetFlow
• bedrock:GetFlowAlias
• bedrock:GetFlowVersion
• bedrock:GetPrompt
• bedrock:InvokeFlow
• bedrock:ListFlowAliases
• bedrock:ListFlowVersions
• bedrock:ListFlows
• bedrock:ListPrompts
• bedrock:PrepareFlow
• bedrock:UpdateFlow
• bedrock:UpdateFlowAlias
• bedrock:UpdatePrompt

Amazon CloudFront

• cloudfront:UpdateDistributionWithStagingConfig

AWS HealthImaging

• medical-imaging:GetDICOMInstanceFrames
• medical-imaging:GetDICOMInstanceMetadata

AWS License Manager Linux Subscriptions Manager

• license-manager-linux-subscriptions:DeregisterSubscriptionProvider
• license-manager-linux-subscriptions:GetRegisteredSubscriptionProvider
• license-manager-linux-subscriptions:ListRegisteredSubscriptionProviders
• license-manager-linux-subscriptions:ListTagsForResource
• license-manager-linux-subscriptions:RegisterSubscriptionProvider
• license-manager-linux-subscriptions:TagResource
• license-manager-linux-subscriptions:UntagResource

Amazon SageMaker

• sagemaker:CreateOptimizationJob
• sagemaker:DeleteOptimization
• sagemaker:DescribeOptimizationJob
• sagemaker:ListOptimizationJobs
• sagemaker:StopOptimizationJob

AWS App Studio

• appstudio:GetAccountStatus
• appstudio:GetEnablementJobStatus
• appstudio:StartEnablementJob
• appstudio:StartRollbackEnablementJob
• appstudio:StartTeamDeployment

AWS Elemental MediaConvert

• mediaconvert:SearchJobs

Amazon Q Business Q Apps

• qapps:ListTagsForResource
• qapps:UntagResource

Amazon SageMaker

• sagemaker:CreateHubContentReference
• sagemaker:DeleteHubContentReference
• sagemaker:DeployHubModel

AWS Systems Manager Quick Setup

• ssm-quicksetup:CreateConfigurationManager
• ssm-quicksetup:DeleteConfigurationManager
• ssm-quicksetup:GetConfigurationManager
• ssm-quicksetup:GetServiceSettings
• ssm-quicksetup:ListConfigurationManagers
• ssm-quicksetup:ListQuickSetupTypes
• ssm-quicksetup:ListTagsForResource
• ssm-quicksetup:TagResource
• ssm-quicksetup:UntagResource
• ssm-quicksetup:UpdateConfigurationDefinition
• ssm-quicksetup:UpdateConfigurationManager
• ssm-quicksetup:UpdateServiceSettings

AWS CloudHSM

• cloudhsm:DeleteResourcePolicy
• cloudhsm:GetResourcePolicy
• cloudhsm:PutResourcePolicy

Amazon Connect Customer Profiles

• profile:CreateSnapshot
• profile:GetSnapshot

Amazon DataZone

• datazone:CreateAssetFilter
• datazone:DeleteAssetFilter
• datazone:GetAssetFilter
• datazone:GetLineageNode
• datazone:ListAssetFilters
• datazone:ListLineageNodeHistory
• datazone:PostLineageEvent
• datazone:UpdateAssetFilter

Amazon Q Business Q Apps

• qapps:AssociateLibraryItemReview
• qapps:DisassociateLibraryItemReview
• qapps:GetQAppSession
• qapps:GetQAppSessionMetadata
• qapps:ImportDocument
• qapps:PredictQApp
• qapps:TagResource
• qapps:UpdateQAppSession
• qapps:UpdateQAppSessionMetadata

Amazon WorkSpaces

• workspaces:CreateWorkspacesPool
• workspaces:DescribeWorkspacesPoolSessions
• workspaces:DescribeWorkspacesPools
• workspaces:ModifyStreamingProperties
• workspaces:StartWorkspacesPool
• workspaces:StopWorkspacesPool
• workspaces:TerminateWorkspacesPool
• workspaces:TerminateWorkspacesPoolSession
• workspaces:UpdateWorkspacesPool

AWS Control Tower

• controltower:ListLandingZoneOperations

Amazon EC2

• ec2:DescribeTrafficMirrorFilterRules

AWS Glue

• glue:CreateUsageProfile
• glue:DeleteUsageProfile
• glue:GetUsageProfile
• glue:ListUsageProfiles
• glue:UpdateUsageProfile

AWS Compute Optimizer

• compute-optimizer:ExportRDSDatabaseRecommendations
• compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics
• compute-optimizer:GetRDSDatabaseRecommendations

Amazon Connect

• connect:CreateAuthenticationProfile
• connect:DescribeAuthenticationProfile
• connect:ListAuthenticationProfiles
• connect:UpdateAuthenticationProfile

AWS CloudShell

• cloudshell:DescribeEnvironments

Amazon Bedrock

• bedrock:AllowVendedLogDeliveryForResource

Amazon Macie

• macie2:BatchUpdateAutomatedDiscoveryAccounts
• macie2:ListAutomatedDiscoveryAccounts

Amazon SageMaker

• sagemaker:CreateMlflowTrackingServer
• sagemaker:CreatePresignedMlflowTrackingServerUrl
• sagemaker:DeleteMlflowTrackingServer
• sagemaker:DescribeMlflowTrackingServer
• sagemaker:ListMlflowTrackingServers
• sagemaker:StartMlflowTrackingServer
• sagemaker:StopMlflowTrackingServer
• sagemaker:UpdateMlflowTrackingServer

Amazon SageMaker with MLflow

• sagemaker-mlflow:AccessUI
• sagemaker-mlflow:CreateExperiment
• sagemaker-mlflow:CreateModelVersion
• sagemaker-mlflow:CreateRegisteredModel
• sagemaker-mlflow:CreateRun
• sagemaker-mlflow:DeleteExperiment
• sagemaker-mlflow:DeleteModelVersion
• sagemaker-mlflow:DeleteModelVersionTag
• sagemaker-mlflow:DeleteRegisteredModel
• sagemaker-mlflow:DeleteRegisteredModelAlias
• sagemaker-mlflow:DeleteRegisteredModelTag
• sagemaker-mlflow:DeleteRun
• sagemaker-mlflow:DeleteTag
• sagemaker-mlflow:GetDownloadURIForModelVersionArtifacts
• sagemaker-mlflow:GetExperiment
• sagemaker-mlflow:GetExperimentByName
• sagemaker-mlflow:GetLatestModelVersions
• sagemaker-mlflow:GetMetricHistory
• sagemaker-mlflow:GetModelVersion
• sagemaker-mlflow:GetModelVersionByAlias
• sagemaker-mlflow:GetRegisteredModel
• sagemaker-mlflow:GetRun
• sagemaker-mlflow:ListArtifacts
• sagemaker-mlflow:LogBatch
• sagemaker-mlflow:LogInputs
• sagemaker-mlflow:LogMetric
• sagemaker-mlflow:LogModel
• sagemaker-mlflow:LogParam
• sagemaker-mlflow:RenameRegisteredModel
• sagemaker-mlflow:RestoreExperiment
• sagemaker-mlflow:RestoreRun
• sagemaker-mlflow:SearchExperiments
• sagemaker-mlflow:SearchModelVersions
• sagemaker-mlflow:SearchRegisteredModels
• sagemaker-mlflow:SearchRuns
• sagemaker-mlflow:SetExperimentTag
• sagemaker-mlflow:SetModelVersionTag
• sagemaker-mlflow:SetRegisteredModelAlias
• sagemaker-mlflow:SetRegisteredModelTag
• sagemaker-mlflow:SetTag
• sagemaker-mlflow:TransitionModelVersionStage
• sagemaker-mlflow:UpdateExperiment
• sagemaker-mlflow:UpdateModelVersion
• sagemaker-mlflow:UpdateRegisteredModel
• sagemaker-mlflow:UpdateRun

AWS Key Management Service

• kms:DeriveSharedSecret

Amazon DataZone

• datazone:AssociateEnvironmentRole
• datazone:CreateEnvironmentAction
• datazone:DeleteEnvironmentAction
• datazone:DisassociateEnvironmentRole
• datazone:GetEnvironmentAction
• datazone:ListEnvironmentActions
• datazone:UpdateEnvironmentAction

AWS Tax Settings

• tax:BatchDeleteTaxRegistration

Amazon Connect

• connect:SearchContactFlowModules
• connect:SearchContactFlows

AWS Mainframe Modernization Application Testing provides tools and resources for automated functional equivalence testing for your migration projects.

• apptest:CreateTestCase
• apptest:CreateTestConfiguration
• apptest:CreateTestSuite
• apptest:DeleteTestCase
• apptest:DeleteTestConfiguration
• apptest:DeleteTestRun
• apptest:DeleteTestSuite
• apptest:GetTestCase
• apptest:GetTestConfiguration
• apptest:GetTestRunStep
• apptest:GetTestSuite
• apptest:ListTagsForResource
• apptest:ListTestCases
• apptest:ListTestConfigurations
• apptest:ListTestRunSteps
• apptest:ListTestRunTestCases
• apptest:ListTestRuns
• apptest:ListTestSuites
• apptest:StartTestRun
• apptest:TagResource
• apptest:UntagResource
• apptest:UpdateTestCase
• apptest:UpdateTestConfiguration
• apptest:UpdateTestSuite

AWS CloudTrail

• cloudtrail:GenerateQuery

AWS Entity Resolution

• entityresolution:BatchDeleteUniqueId

Amazon S3

• s3:PauseReplication

Amazon GuardDuty

• guardduty:CreateMalwareProtectionPlan
• guardduty:DeleteMalwareProtectionPlan
• guardduty:GetMalwareProtectionPlan
• guardduty:ListMalwareProtectionPlans
• guardduty:UpdateMalwareProtectionPlan

AWS IAM Access Analyzer

• access-analyzer:CheckNoPublicAccess
• access-analyzer:GenerateFindingRecommendation
• access-analyzer:GetFindingRecommendation

AWS Private CA Connector for SCEP

• pca-connector-scep:CreateChallenge
• pca-connector-scep:CreateConnector
• pca-connector-scep:DeleteChallenge
• pca-connector-scep:DeleteConnector
• pca-connector-scep:GetChallengeMetadata
• pca-connector-scep:GetChallengePassword
• pca-connector-scep:GetConnector
• pca-connector-scep:ListChallengeMetadata
• pca-connector-scep:ListConnectors
• pca-connector-scep:ListTagsForResource
• pca-connector-scep:TagResource
• pca-connector-scep:UntagResource

AWS Account Management

• account:AcceptPrimaryEmailUpdate
• account:GetPrimaryEmail
• account:StartPrimaryEmailUpdate

Amazon Location

• geo:ForecastGeofenceEvents
• geo:VerifyDevicePosition

AWS Lake Formation

• lakeformation:GetDataLakePrincipal

AWS Launch Wizard

• launchwizard:GetWorkloadDeploymentPattern
• launchwizard:ListTagsForResource
• launchwizard:TagResource
• launchwizard:UntagResource

AWS Batch

• batch:GetJobQueueSnapshot

Amazon EMR Serverless

• emr-serverless:ListJobRunAttempts

Amazon CloudWatch Application Signals

• application-signals:BatchGetServiceLevelObjectiveBudgetReport
• application-signals:CreateServiceLevelObjective
• application-signals:DeleteServiceLevelObjective
• application-signals:GetService
• application-signals:GetServiceLevelObjective
• application-signals:ListServiceDependencies
• application-signals:ListServiceDependents
• application-signals:ListServiceLevelObjectives
• application-signals:ListServiceOperations
• application-signals:ListServices
• application-signals:ListTagsForResource
• application-signals:StartDiscovery
• application-signals:TagResource
• application-signals:UntagResource
• application-signals:UpdateServiceLevelObjective

Amazon WorkSpaces Secure Browser

• workspaces-web:AssociateBrowserSettings
• workspaces-web:AssociateIpAccessSettings
• workspaces-web:AssociateNetworkSettings
• workspaces-web:AssociateTrustStore
• workspaces-web:AssociateUserAccessLoggingSettings
• workspaces-web:AssociateUserSettings
• workspaces-web:CreateBrowserSettings
• workspaces-web:CreateIdentityProvider
• workspaces-web:CreateIpAccessSettings
• workspaces-web:CreateNetworkSettings
• workspaces-web:CreatePortal
• workspaces-web:CreateTrustStore
• workspaces-web:CreateUserAccessLoggingSettings
• workspaces-web:CreateUserSettings
• workspaces-web:DeleteBrowserSettings
• workspaces-web:DeleteIdentityProvider
• workspaces-web:DeleteIpAccessSettings
• workspaces-web:DeleteNetworkSettings
• workspaces-web:DeletePortal
• workspaces-web:DeleteTrustStore
• workspaces-web:DeleteUserAccessLoggingSettings
• workspaces-web:DeleteUserSettings
• workspaces-web:DisassociateBrowserSettings
• workspaces-web:DisassociateIpAccessSettings
• workspaces-web:DisassociateNetworkSettings
• workspaces-web:DisassociateTrustStore
• workspaces-web:DisassociateUserAccessLoggingSettings
• workspaces-web:DisassociateUserSettings
• workspaces-web:GetBrowserSettings
• workspaces-web:GetIdentityProvider
• workspaces-web:GetIpAccessSettings
• workspaces-web:GetNetworkSettings
• workspaces-web:GetPortal
• workspaces-web:GetPortalServiceProviderMetadata
• workspaces-web:GetTrustStore
• workspaces-web:GetTrustStoreCertificate
• workspaces-web:GetUserAccessLoggingSettings
• workspaces-web:GetUserSettings
• workspaces-web:ListBrowserSettings
• workspaces-web:ListIdentityProviders
• workspaces-web:ListIpAccessSettings
• workspaces-web:ListNetworkSettings
• workspaces-web:ListPortals
• workspaces-web:ListTagsForResource
• workspaces-web:ListTrustStoreCertificates
• workspaces-web:ListTrustStores
• workspaces-web:ListUserAccessLoggingSettings
• workspaces-web:ListUserSettings
• workspaces-web:TagResource
• workspaces-web:UntagResource
• workspaces-web:UpdateBrowserSettings
• workspaces-web:UpdateIdentityProvider
• workspaces-web:UpdateIpAccessSettings
• workspaces-web:UpdateNetworkSettings
• workspaces-web:UpdatePortal
• workspaces-web:UpdateTrustStore
• workspaces-web:UpdateUserAccessLoggingSettings
• workspaces-web:UpdateUserSettings

AWS Glue

• glue:BatchPutDataQualityStatisticAnnotation
• glue:DescribeConnectionType
• glue:DescribeEntity
• glue:GetDataQualityModel
• glue:GetDataQualityModelResult
• glue:ListConnectionTypes
• glue:ListDataQualityStatisticAnnotations
• glue:ListDataQualityStatistics
• glue:ListEntities
• glue:PutDataQualityProfileAnnotation
• glue:RefreshOAuth2Tokens

Amazon Simple Workflow Service

• swf:DeleteActivityType
• swf:DeleteWorkflowType

AWS Chatbot

• chatbot:ListTagsForResource
• chatbot:TagResource
• chatbot:UntagResource

Amazon EC2

• ec2:DisableImageDeregistrationProtection
• ec2:EnableImageDeregistrationProtection
• ec2:GetInstanceTpmEkPub

Amazon EMR Serverless

• emr-serverless:AccessLivyEndpoints

AWS Support Recommendations

• supportrecommendations:GetSupportTroubleshootingResponse
• supportrecommendations:StartSupportTroubleshooting

AWS Payments

• payments:ListPaymentInstruments
• payments:ListTagsForResource
• payments:TagResource
• payments:UntagResource
• payments:UpdatePaymentInstrument

Amazon Simple Email Service - Mail Manager

• ses:CreateAddonInstance
• ses:CreateAddonSubscription
• ses:CreateArchive
• ses:CreateIngressPoint
• ses:CreateRelay
• ses:CreateRuleSet
• ses:CreateTrafficPolicy
• ses:DeleteAddonInstance
• ses:DeleteAddonSubscription
• ses:DeleteArchive
• ses:DeleteIngressPoint
• ses:DeleteRelay
• ses:DeleteRuleSet
• ses:DeleteTrafficPolicy
• ses:GetAddonInstance
• ses:GetAddonSubscription
• ses:GetArchive
• ses:GetArchiveExport
• ses:GetArchiveMessage
• ses:GetArchiveMessageContent
• ses:GetArchiveSearch
• ses:GetArchiveSearchResults
• ses:GetIngressPoint
• ses:GetRelay
• ses:GetRuleSet
• ses:GetTrafficPolicy
• ses:ListAddonInstances
• ses:ListAddonSubscriptions
• ses:ListArchiveExports
• ses:ListArchiveSearches
• ses:ListArchives
• ses:ListIngressPoints
• ses:ListRelays
• ses:ListRuleSets
• ses:ListTagsForResource
• ses:ListTrafficPolicies
• ses:StartArchiveExport
• ses:StartArchiveSearch
• ses:StopArchiveExport
• ses:StopArchiveSearch
• ses:TagResource
• ses:UntagResource
• ses:UpdateArchive
• ses:UpdateIngressPoint
• ses:UpdateRelay
• ses:UpdateRuleSet
• ses:UpdateTrafficPolicy

AWS Control Tower

• controltower:ListControlOperations

AWS HealthImaging

• medical-imaging:GetDICOMInstance

Amazon QuickSight

• quicksight:DescribeKeyRegistration
• quicksight:UpdateKeyRegistration

AWS User Subscriptions

• user-subscriptions:CreateClaim
• user-subscriptions:DeleteClaim
• user-subscriptions:ListApplicationClaims
• user-subscriptions:ListClaims
• user-subscriptions:ListUserSubscriptions
• user-subscriptions:UpdateClaim

Amazon Managed Grafana

• grafana:CreateWorkspaceServiceAccount
• grafana:CreateWorkspaceServiceAccountToken
• grafana:DeleteWorkspaceServiceAccount
• grafana:DeleteWorkspaceServiceAccountToken
• grafana:ListWorkspaceServiceAccountTokens
• grafana:ListWorkspaceServiceAccounts

Amazon Q in Connect

• wisdom:CreateContentAssociation
• wisdom:DeleteContentAssociation
• wisdom:GetContentAssociation
• wisdom:ListContentAssociations

Amazon Connect

• connect:BatchGetAttachedFileMetadata
• connect:CompleteAttachedFileUpload
• connect:DeleteAttachedFile
• connect:GetAttachedFile
• connect:StartAttachedFileUpload

Amazon EventBridge

• events:UpdateEventBus

Amazon Connect Cases

• cases:DeleteRelatedItem

Amazon Q

• q:CreateAssignment
• q:DeleteAssignment

AWS Systems Manager for SAP

• ssm-sap:ListOperationEvents
• ssm-sap:StartApplication
• ssm-sap:StopApplication

AWS Mainframe Modernization Service

• m2:ListBatchJobRestartPoints

AWS Transfer Family

• transfer:StartDirectoryListing

Amazon VPC Lattice Services

• vpc-lattice-svcs:Connect

AWS Budget Service

• budgets:ListTagsForResource
• budgets:TagResource
• budgets:UntagResource

AWS Resilience Hub

• resiliencehub:ListAppAssessmentResourceDrifts

AWS Trusted Advisor

• trustedadvisor:BatchUpdateRecommendationResourceExclusion

Amazon Connect

• connect:AdminGetEmergencyAccessToken

Amazon Personalize

• personalize:CreateDataDeletionJob
• personalize:DescribeDataDeletionJob
• personalize:ListDataDeletionJobs

Amazon Pinpoint SMS Voice V2

• sms-voice:AssociateProtectConfiguration
• sms-voice:CreateProtectConfiguration
• sms-voice:DeleteAccountDefaultProtectConfiguration
• sms-voice:DeleteMediaMessageSpendLimitOverride
• sms-voice:DeleteProtectConfiguration
• sms-voice:DescribeProtectConfigurations
• sms-voice:DisassociateProtectConfiguration
• sms-voice:GetProtectConfigurationCountryRuleSet
• sms-voice:SendMediaMessage
• sms-voice:SetAccountDefaultProtectConfiguration
• sms-voice:SetMediaMessageSpendLimitOverride
• sms-voice:UpdateProtectConfiguration
• sms-voice:UpdateProtectConfigurationCountryRuleSet

Amazon Q Business

• qbusiness:CancelSubscription
• qbusiness:CreateSubscription
• qbusiness:ListSubscriptions
• qbusiness:UpdateSubscription

Amazon Timestream

• timestream:DescribeAccountSettings
• timestream:UpdateAccountSettings

Amazon Q Business Q Apps

• qapps:AssociateQAppWithUser
• qapps:CopyQApp
• qapps:CreateLibraryItem
• qapps:CreateLibraryItemReview
• qapps:CreateQApp
• qapps:CreateSubscriptionToken
• qapps:DeleteLibraryItem
• qapps:DeleteQApp
• qapps:DisassociateQAppFromUser
• qapps:GetLibraryItem
• qapps:GetQApp
• qapps:ImportDocumentToQApp
• qapps:ImportDocumentToQAppSession
• qapps:ListLibraryItems
• qapps:ListQApps
• qapps:PredictProblemStatementFromConversation
• qapps:PredictQAppFromProblemStatement
• qapps:StartQAppSession
• qapps:StopQAppSession
• qapps:UpdateLibraryItem
• qapps:UpdateQApp

AWS CodePipeline

• codepipeline:RollbackStage

AWS HealthLake

• healthlake:SearchEverything

AWS App Mesh Preview

• appmesh-preview:DeleteMeshPolicy
• appmesh-preview:GetMeshPolicy
• appmesh-preview:PutMeshPolicy

Amazon Connect Cases

• cases:DeleteField
• cases:DeleteLayout
• cases:DeleteTemplate

Amazon GameLift

• gamelift:CreateContainerGroupDefinition
• gamelift:DeleteContainerGroupDefinition
• gamelift:DescribeContainerGroupDefinition
• gamelift:ListContainerGroupDefinitions

Amazon QuickSight

• quicksight:UpdateSPICECapacityConfiguration

AWS Step Functions

• states:ValidateStateMachineDefinition

Amazon WorkDocs

• workdocs:DescribeInstanceExports
• workdocs:StartInstanceExport

AWS Signin

• signin:CreateTrustedIdentityPropagationApplicationForConsole
• signin:ListTrustedIdentityPropagationApplicationsForConsole

Amazon Bedrock

• bedrock:ApplyGuardrail
• bedrock:CreateEvaluationJob
• bedrock:GetEvaluationJob
• bedrock:ListEvaluationJobs
• bedrock:StopEvaluationJob

AWS Identity and Access Management Roles Anywhere

• rolesanywhere:DeleteAttributeMapping
• rolesanywhere:PutAttributeMapping

Amazon Route 53 Profiles enables sharing DNS settings with VPCs

• route53profiles:AssociateProfile
• route53profiles:AssociateResourceToProfile
• route53profiles:CreateProfile
• route53profiles:DeleteProfile
• route53profiles:DisassociateProfile
• route53profiles:DisassociateResourceFromProfile
• route53profiles:GetProfile
• route53profiles:GetProfileAssociation
• route53profiles:GetProfileResourceAssociation
• route53profiles:ListProfileAssociations
• route53profiles:ListProfileResourceAssociations
• route53profiles:ListProfiles
• route53profiles:ListTagsForResource
• route53profiles:TagResource
• route53profiles:UntagResource
• route53profiles:UpdateProfileResourceAssociation

AWS App Mesh

• appmesh:DeleteMeshPolicy
• appmesh:GetMeshPolicy
• appmesh:PutMeshPolicy

Amazon Q

• q:GetIdentityMetadata
• q:PassRequest
• q:UpdateTroubleshootingCommandResult

Amazon WorkSpaces

• workspaces:AcceptAccountLinkInvitation
• workspaces:CreateAccountLinkInvitation
• workspaces:DeleteAccountLinkInvitation
• workspaces:GetAccountLink
• workspaces:ListAccountLinks
• workspaces:RejectAccountLinkInvitation

Amazon CloudWatch Internet Monitor

• internetmonitor:GetInternetEvent
• internetmonitor:ListInternetEvents

Amazon EMR on EKS (EMR Containers)

• emr-containers:CreateSecurityConfiguration
• emr-containers:DescribeSecurityConfiguration
• emr-containers:ListSecurityConfigurations

AWS Outposts

• outposts:CancelCapacityTask
• outposts:GetCapacityTask
• outposts:GetOutpostSupportedInstanceTypes
• outposts:ListCapacityTasks
• outposts:StartCapacityTask

AWS Key Management Service

• kms:ListKeyRotations
• kms:RotateKeyOnDemand

AWS Well-Architected Tool

• wellarchitected:ConfigureIntegration
• wellarchitected:GetGlobalSettings
• wellarchitected:UpdateIntegration

AWS Glue

• glue:BatchGetStageFiles
• glue:GetEnvironment
• glue:GetExecutors
• glue:GetExecutorsThreads
• glue:GetLogParsingStatus
• glue:GetQueries
• glue:GetQuery
• glue:GetStage
• glue:GetStageAttempt
• glue:GetStageAttemptTaskList
• glue:GetStageAttemptTaskSummary
• glue:GetStageFiles
• glue:GetStages
• glue:GetStorage
• glue:GetStorageUnit
• glue:RequestLogParsing

AWS Elemental MediaLive

• medialive:CreateCloudWatchAlarmTemplate
• medialive:CreateCloudWatchAlarmTemplateGroup
• medialive:CreateEventBridgeRuleTemplate
• medialive:CreateEventBridgeRuleTemplateGroup
• medialive:CreateSignalMap
• medialive:DeleteCloudWatchAlarmTemplate
• medialive:DeleteCloudWatchAlarmTemplateGroup
• medialive:DeleteEventBridgeRuleTemplate
• medialive:DeleteEventBridgeRuleTemplateGroup
• medialive:DeleteSignalMap
• medialive:GetCloudWatchAlarmTemplate
• medialive:GetCloudWatchAlarmTemplateGroup
• medialive:GetEventBridgeRuleTemplate
• medialive:GetEventBridgeRuleTemplateGroup
• medialive:GetSignalMap
• medialive:ListCloudWatchAlarmTemplateGroups
• medialive:ListCloudWatchAlarmTemplates
• medialive:ListEventBridgeRuleTemplateGroups
• medialive:ListEventBridgeRuleTemplates
• medialive:ListSignalMaps
• medialive:StartDeleteMonitorDeployment
• medialive:StartMonitorDeployment
• medialive:StartUpdateSignalMap
• medialive:UpdateCloudWatchAlarmTemplate
• medialive:UpdateCloudWatchAlarmTemplateGroup
• medialive:UpdateEventBridgeRuleTemplate
• medialive:UpdateEventBridgeRuleTemplateGroup

Amazon Q in Connect

• wisdom:UpdateSession

AWS Supply Chain

• scn:SendDataIntegrationEvent

Amazon DataZone

• datazone:AddPolicyGrant
• datazone:ListPolicyGrants
• datazone:RemovePolicyGrant
• datazone:UpdateDataSourceRunActivities

AWS Control Catalog

• controlcatalog:ListCommonControls
• controlcatalog:ListDomains
• controlcatalog:ListObjectives

Amazon Neptune Analytics

• neptune-graph:StartImportTask

AWS Clean Rooms

• cleanrooms:BatchGetSchemaAnalysisRule

Amazon RDS

• rds:ModifyIntegration

Amazon DocumentDB Elastic Clusters

• docdb-elastic:CopyClusterSnapshot
• docdb-elastic:StartCluster
• docdb-elastic:StopCluster

AWS Entity Resolution

• entityresolution:AddPolicyStatement
• entityresolution:CreateIdNamespace
• entityresolution:DeleteIdNamespace
• entityresolution:DeletePolicyStatement
• entityresolution:GetIdNamespace
• entityresolution:GetPolicy
• entityresolution:ListIdNamespaces
• entityresolution:PutPolicy
• entityresolution:UpdateIdNamespace
• entityresolution:UseIdNamespace

AWS Marketplace Catalog

• aws-marketplace:DescribeAssessment
• aws-marketplace:ListAssessments

AWS CloudFormation

• cloudformation:ListStackSetAutoDeploymentTargets

Amazon DataZone

• datazone:DeleteTimeSeriesDataPoints
• datazone:GetTimeSeriesDataPoint
• datazone:ListTimeSeriesDataPoints
• datazone:PostTimeSeriesDataPoints

AWS IoT Wireless

• iotwireless:GetMetricConfiguration
• iotwireless:GetMetrics
• iotwireless:UpdateMetricConfiguration

AWS CodeConnections

• codeconnections:CreateConnection
• codeconnections:CreateHost
• codeconnections:CreateRepositoryLink
• codeconnections:CreateSyncConfiguration
• codeconnections:DeleteConnection
• codeconnections:DeleteHost
• codeconnections:DeleteRepositoryLink
• codeconnections:DeleteSyncConfiguration
• codeconnections:GetConnection
• codeconnections:GetHost
• codeconnections:GetIndividualAccessToken
• codeconnections:GetInstallationUrl
• codeconnections:GetRepositoryLink
• codeconnections:GetRepositorySyncStatus
• codeconnections:GetResourceSyncStatus
• codeconnections:GetSyncBlockerSummary
• codeconnections:GetSyncConfiguration
• codeconnections:ListConnections
• codeconnections:ListHosts
• codeconnections:ListInstallationTargets
• codeconnections:ListRepositoryLinks
• codeconnections:ListRepositorySyncDefinitions
• codeconnections:ListSyncConfigurations
• codeconnections:ListTagsForResource
• codeconnections:PassConnection
• codeconnections:PassRepository
• codeconnections:RegisterAppCode
• codeconnections:StartAppRegistrationHandshake
• codeconnections:StartOAuthHandshake
• codeconnections:TagResource
• codeconnections:UntagResource
• codeconnections:UpdateConnectionInstallation
• codeconnections:UpdateHost
• codeconnections:UpdateRepositoryLink
• codeconnections:UpdateSyncBlocker
• codeconnections:UpdateSyncConfiguration
• codeconnections:UseConnection

AWS Deadline Cloud

• deadline:AssociateMemberToFarm
• deadline:AssociateMemberToFleet
• deadline:AssociateMemberToJob
• deadline:AssociateMemberToQueue
• deadline:AssumeFleetRoleForRead
• deadline:AssumeFleetRoleForWorker
• deadline:AssumeQueueRoleForRead
• deadline:AssumeQueueRoleForUser
• deadline:AssumeQueueRoleForWorker
• deadline:BatchGetJobEntity
• deadline:CopyJobTemplate
• deadline:CreateBudget
• deadline:CreateFarm
• deadline:CreateFleet
• deadline:CreateJob
• deadline:CreateLicenseEndpoint
• deadline:CreateMonitor
• deadline:CreateQueue
• deadline:CreateQueueEnvironment
• deadline:CreateQueueFleetAssociation
• deadline:CreateStorageProfile
• deadline:CreateWorker
• deadline:DeleteBudget
• deadline:DeleteFarm
• deadline:DeleteFleet
• deadline:DeleteLicenseEndpoint
• deadline:DeleteMeteredProduct
• deadline:DeleteMonitor
• deadline:DeleteQueue
• deadline:DeleteQueueEnvironment
• deadline:DeleteQueueFleetAssociation
• deadline:DeleteStorageProfile
• deadline:DeleteWorker
• deadline:DisassociateMemberFromFarm
• deadline:DisassociateMemberFromFleet
• deadline:DisassociateMemberFromJob
• deadline:DisassociateMemberFromQueue
• deadline:GetApplicationVersion
• deadline:GetBudget
• deadline:GetFarm
• deadline:GetFleet
• deadline:GetJob
• deadline:GetLicenseEndpoint
• deadline:GetMonitor
• deadline:GetQueue
• deadline:GetQueueEnvironment
• deadline:GetQueueFleetAssociation
• deadline:GetSession
• deadline:GetSessionAction
• deadline:GetSessionsStatisticsAggregation
• deadline:GetStep
• deadline:GetStorageProfile
• deadline:GetStorageProfileForQueue
• deadline:GetTask
• deadline:GetWorker
• deadline:ListAvailableMeteredProducts
• deadline:ListBudgets
• deadline:ListFarmMembers
• deadline:ListFarms
• deadline:ListFleetMembers
• deadline:ListFleets
• deadline:ListJobMembers
• deadline:ListJobs
• deadline:ListLicenseEndpoints
• deadline:ListMeteredProducts
• deadline:ListMonitors
• deadline:ListQueueEnvironments
• deadline:ListQueueFleetAssociations
• deadline:ListQueueMembers
• deadline:ListQueues
• deadline:ListSessionActions
• deadline:ListSessions
• deadline:ListSessionsForWorker
• deadline:ListStepConsumers
• deadline:ListStepDependencies
• deadline:ListSteps
• deadline:ListStorageProfiles
• deadline:ListStorageProfilesForQueue
• deadline:ListTagsForResource
• deadline:ListTasks
• deadline:ListWorkers
• deadline:PutMeteredProduct
• deadline:SearchJobs
• deadline:SearchSteps
• deadline:SearchTasks
• deadline:SearchWorkers
• deadline:StartSessionsStatisticsAggregation
• deadline:TagResource
• deadline:UntagResource
• deadline:UpdateBudget
• deadline:UpdateFarm
• deadline:UpdateFleet
• deadline:UpdateJob
• deadline:UpdateMonitor
• deadline:UpdateQueue
• deadline:UpdateQueueEnvironment
• deadline:UpdateQueueFleetAssociation
• deadline:UpdateSession
• deadline:UpdateStep
• deadline:UpdateStorageProfile
• deadline:UpdateTask
• deadline:UpdateWorker
• deadline:UpdateWorkerSchedule

Amazon SageMaker

• sagemaker:DeleteResourcePolicy
• sagemaker:GetResourcePolicy
• sagemaker:PutResourcePolicy

Amazon GroundTruth Labeling

• groundtruthlabeling:CreateBatch
• groundtruthlabeling:CreateIntakeForm
• groundtruthlabeling:CreateProject
• groundtruthlabeling:CreateWorkflowDefinition
• groundtruthlabeling:GenerateLIDARPreviewTaskConfigJob
• groundtruthlabeling:GetBatch
• groundtruthlabeling:GetIntakeFormStatus
• groundtruthlabeling:ListBatches
• groundtruthlabeling:ListProjects
• groundtruthlabeling:RunGenerateManifestMetricsJob
• groundtruthlabeling:UpdateBatch

Amazon EC2

• ec2:DescribeMacHosts
• ec2:GetInstanceMetadataDefaults
• ec2:ModifyInstanceMetadataDefaults

Amazon FinSpace

• finspace:DeleteKxClusterNode

AWS Cost Explorer Service

• ce:ListCostAllocationTagBackfillHistory
• ce:StartCostAllocationTagBackfill

AWS Migration Hub Orchestrator

• migrationhub-orchestrator:CreateTemplate
• migrationhub-orchestrator:DeleteTemplate
• migrationhub-orchestrator:UpdateTemplate

AWS Savings Plans

• savingsplans:ReturnSavingsPlan

Amazon CloudWatch Internet Monitor

• internetmonitor:Link

AWS CodeArtifact

• codeartifact:CreatePackageGroup
• codeartifact:DeletePackageGroup
• codeartifact:DescribePackageGroup
• codeartifact:GetAssociatedPackageGroup
• codeartifact:ListAllowedRepositoriesForGroup
• codeartifact:ListAssociatedPackages
• codeartifact:ListPackageGroups
• codeartifact:ListSubPackageGroups
• codeartifact:UpdatePackageGroup
• codeartifact:UpdatePackageGroupOriginConfiguration

Amazon DynamoDB

• dynamodb:DeleteResourcePolicy
• dynamodb:PutResourcePolicy
• dynamodb:UpdateKinesisStreamingDestination

Amazon WorkMail

• workmail:AllowVendedLogDeliveryForResource

Amazon Managed Blockchain Query

• managedblockchain-query:ListFilteredTransactionEvents

Amazon Timestream InfluxDB

• timestream-influxdb:CreateDbInstance
• timestream-influxdb:CreateDbParameterGroup
• timestream-influxdb:DeleteDbInstance
• timestream-influxdb:GetDbInstance
• timestream-influxdb:GetDbParameterGroup
• timestream-influxdb:ListDbInstances
• timestream-influxdb:ListDbParameterGroups
• timestream-influxdb:ListTagsForResource
• timestream-influxdb:TagResource
• timestream-influxdb:UntagResource
• timestream-influxdb:UpdateDbInstance

Amazon Timestream Influxdb

• timestream-influxdb:CreateDbInstance
• timestream-influxdb:CreateDbParameterGroup
• timestream-influxdb:DeleteDbInstance
• timestream-influxdb:GetDbInstance
• timestream-influxdb:GetDbParameterGroup
• timestream-influxdb:ListDbInstances
• timestream-influxdb:ListDbParameterGroups
• timestream-influxdb:ListTagsForResource
• timestream-influxdb:TagResource
• timestream-influxdb:UntagResource
• timestream-influxdb:UpdateDbInstance

Amazon Lightsail

• lightsail:GetSetupHistory
• lightsail:SetupInstanceHttps

Amazon DataZone

• datazone:CancelMetadataGenerationRun

AWS Migration Hub Strategy Recommendations

• migrationhub-strategy:PutLogData
• migrationhub-strategy:PutMetricData

Amazon Lex V2

• lex:CreateBotReplica
• lex:DeleteBotReplica
• lex:DescribeBotReplica
• lex:ListBotAliasReplicas
• lex:ListBotReplicas
• lex:ListBotVersionReplicas

Amazon Elastic MapReduce

• elasticmapreduce:SetUnhealthyNodeReplacement

AWS Identity Sync

• identity-sync:AllowVendedLogDeliveryForResource

Amazon Q

• q:ListConversations

Amazon Redshift

• redshift:CreateQev2IdcApplication
• redshift:DeleteQev2IdcApplication
• redshift:DescribeQev2IdcApplications
• redshift:ModifyQev2IdcApplication

AWS Amplify UI Builder

• amplifyuibuilder:ListTagsForResource
• amplifyuibuilder:TagResource
• amplifyuibuilder:UntagResource

Amazon Managed Streaming for Kafka Connect

• kafkaconnect:DeleteWorkerConfiguration
• kafkaconnect:ListTagsForResource
• kafkaconnect:TagResource
• kafkaconnect:UntagResource

AWS WAF V2

• wafv2:DeleteAPIKey

AWS Elemental MediaLive

• medialive:RestartChannelPipelines

AWS Resource Groups

• resource-groups:DeleteGroupPolicy
• resource-groups:GetGroupPolicy
• resource-groups:ListResourceTypes

Amazon Message Gateway Service

• ssmmessages:CreateControlChannel
• ssmmessages:CreateDataChannel
• ssmmessages:OpenControlChannel
• ssmmessages:OpenDataChannel

Amazon Bedrock

• bedrock:DetectGeneratedContent

AWS Control Tower

• controltower:DisableBaseline
• controltower:EnableBaseline
• controltower:GetBaseline
• controltower:GetBaselineOperation
• controltower:GetEnabledBaseline
• controltower:ListBaselines
• controltower:ListEnabledBaselines
• controltower:ResetEnabledBaseline
• controltower:UpdateEnabledBaseline

Amazon SageMaker

• sagemaker:UpdateClusterSoftware

AWS CloudFormation

• cloudformation:CreateGeneratedTemplate
• cloudformation:DeleteGeneratedTemplate
• cloudformation:DescribeGeneratedTemplate
• cloudformation:DescribeResourceScan
• cloudformation:GetGeneratedTemplate
• cloudformation:ListGeneratedTemplates
• cloudformation:ListResourceScanRelatedResources
• cloudformation:ListResourceScanResources
• cloudformation:ListResourceScans
• cloudformation:StartResourceScan
• cloudformation:UpdateGeneratedTemplate

AWS Database Migration Service

• dms:CreateTest
• dms:CreateTestEnvironments
• dms:CreateTestPlan
• dms:CreateTestRun
• dms:DeleteTest
• dms:DeleteTestPlan
• dms:DescribeTestEnvironments
• dms:DescribeTestGenerationStatus
• dms:DescribeTestPlans
• dms:DescribeTestRunResultsSummaries
• dms:DescribeTestRuns
• dms:DescribeTests
• dms:ModifyTest
• dms:ModifyTestPlan
• dms:StartGenerateTests
• dms:StopGenerateTests
• dms:StopTestRun
• dms:ViewTestRunResults

Amazon Redshift

• redshift:ListRecommendations

AWS Tax Settings

• tax:GetTaxInfoReportingDocument

AWS Billing

• billing:GetBillingData
• billing:GetBillingDetails
• billing:GetBillingNotifications
• billing:GetBillingPreferences
• billing:GetContractInformation
• billing:GetCredits
• billing:GetIAMAccessPreference
• billing:GetSellerOfRecord
• billing:ListBillingViews
• billing:PutContractInformation
• billing:RedeemCredits
• billing:UpdateBillingPreferences
• billing:UpdateIAMAccessPreference

AWS Billing Console

• aws-portal:GetConsoleActionSetEnforced
• aws-portal:ModifyAccount
• aws-portal:ModifyBilling
• aws-portal:ModifyPaymentMethods
• aws-portal:UpdateConsoleActionSetEnforced
• aws-portal:ViewAccount
• aws-portal:ViewBilling
• aws-portal:ViewPaymentMethods
• aws-portal:ViewUsage

Tag Editor

• resource-explorer:ListResourceTypes
• resource-explorer:ListResources
• resource-explorer:ListTags

AWS AppSync

• appsync:GetGraphqlApiEnvironmentVariables
• appsync:PutGraphqlApiEnvironmentVariables

AWS Billing And Cost Management Data Exports

• bcm-data-exports:CreateExport
• bcm-data-exports:DeleteExport
• bcm-data-exports:GetExecution
• bcm-data-exports:GetExport
• bcm-data-exports:GetTable
• bcm-data-exports:ListExecutions
• bcm-data-exports:ListExports
• bcm-data-exports:ListTables
• bcm-data-exports:ListTagsForResource
• bcm-data-exports:TagResource
• bcm-data-exports:UntagResource
• bcm-data-exports:UpdateExport

Amazon SageMaker

• sagemaker:DeleteHyperParameterTuningJob

AWS Billing and Cost Management And Cost Management Data Exports

• bcm-data-exports:CreateExport
• bcm-data-exports:DeleteExport
• bcm-data-exports:GetExecution
• bcm-data-exports:GetExport
• bcm-data-exports:GetTable
• bcm-data-exports:ListExecutions
• bcm-data-exports:ListExports
• bcm-data-exports:ListTables
• bcm-data-exports:ListTagsForResource
• bcm-data-exports:TagResource
• bcm-data-exports:UntagResource
• bcm-data-exports:UpdateExport

Amazon DataZone

• datazone:ListEnvironmentBlueprintConfigurationSummaries

Amazon Interactive Video Service

• ivs:CreatePlaybackRestrictionPolicy
• ivs:DeletePlaybackRestrictionPolicy
• ivs:GetPlaybackRestrictionPolicy
• ivs:ListPlaybackRestrictionPolicies
• ivs:UpdatePlaybackRestrictionPolicy

Amazon RDS

• rds:CreateDBShardGroup
• rds:DeleteDBShardGroup
• rds:DescribeDBShardGroups
• rds:ModifyDBShardGroup
• rds:RebootDBShardGroup

AWS Billing And Cost Management Data Exports

• bcm-data-exports:CreateExport
• bcm-data-exports:DeleteExport
• bcm-data-exports:GetExecution
• bcm-data-exports:GetExport
• bcm-data-exports:GetTable
• bcm-data-exports:ListExecutions
• bcm-data-exports:ListExports
• bcm-data-exports:ListTables
• bcm-data-exports:ListTagsForResource
• bcm-data-exports:TagResource
• bcm-data-exports:UntagResource
• bcm-data-exports:UpdateExport

AWS Elemental MediaConnect

• mediaconnect:DescribeFlowSourceMetadata

Amazon Inspector2

• inspector2:CreateCisScanConfiguration
• inspector2:DeleteCisScanConfiguration
• inspector2:GetCisScanReport
• inspector2:GetCisScanResultDetails
• inspector2:ListCisScanConfigurations
• inspector2:ListCisScanResultsAggregatedByChecks
• inspector2:ListCisScanResultsAggregatedByTargetResource
• inspector2:ListCisScans
• inspector2:SendCisSessionHealth
• inspector2:SendCisSessionTelemetry
• inspector2:StartCisSession
• inspector2:StopCisSession
• inspector2:UpdateCisScanConfiguration

AWS CodeBuild

• codebuild:BatchGetFleets
• codebuild:CreateFleet
• codebuild:DeleteFleet
• codebuild:ListFleets
• codebuild:UpdateFleet

Amazon Connect Cases

• cases:GetCaseAuditEvents

Amazon Elastic MapReduce

• elasticmapreduce:SetKeepJobFlowAliveWhenNoSteps

AWS Supply Chain

• scn:CreateBillOfMaterialsImportJob
• scn:GetBillOfMaterialsImportJob

AWS Lake Formation

• lakeformation:CreateLakeFormationIdentityCenterConfiguration
• lakeformation:DeleteLakeFormationIdentityCenterConfiguration
• lakeformation:DescribeLakeFormationIdentityCenterConfiguration
• lakeformation:UpdateLakeFormationIdentityCenterConfiguration

Amazon DynamoDB

• dynamodb:GetResourcePolicy

AWS IoT

• iot:CreateCertificateProvider
• iot:DeleteCertificateProvider
• iot:DescribeCertificateProvider
• iot:ListCertificateProviders
• iot:UpdateCertificateProvider

Amazon AppIntegrations

• app-integrations:CreateApplicationAssociation
• app-integrations:DeleteApplication
• app-integrations:DeleteApplicationAssociation
• app-integrations:ListApplicationAssociations

AWS CodeCommit

• codecommit:UpdateRepositoryEncryptionKey

Amazon Connect

• connect:AssociateUserProficiencies
• connect:DisassociateUserProficiencies
• connect:ListUserProficiencies
• connect:SearchContacts
• connect:SearchPredefinedAttributes
• connect:UpdateContactRoutingData
• connect:UpdateUserProficiencies

Amazon Elastic Kubernetes Service

• eks:DescribeInsight
• eks:ListInsights

Amazon GuardDuty

• guardduty:GetOrganizationStatistics

Amazon RDS

• rds:DescribeDBRecommendations
• rds:DisableHttpEndpoint
• rds:EnableHttpEndpoint
• rds:ModifyDBRecommendation

Amazon SageMaker

• sagemaker:DeleteCompilationJob

Amazon CloudWatch Network Monitor

• networkmonitor:CreateMonitor
• networkmonitor:CreateProbe
• networkmonitor:DeleteMonitor
• networkmonitor:DeleteProbe
• networkmonitor:GetMonitor
• networkmonitor:GetProbe
• networkmonitor:ListMonitors
• networkmonitor:ListTagsForResource
• networkmonitor:TagResource
• networkmonitor:UntagResource
• networkmonitor:UpdateMonitor
• networkmonitor:UpdateProbe

Amazon FSx

• fsx:DeleteResourcePolicy
• fsx:GetResourcePolicy
• fsx:PutResourcePolicy

Amazon QuickSight

• quicksight:UpdateDashboardLinks

Amazon Connect

• connect:PauseContact
• connect:ResumeContact
• connect:TagContact
• connect:UntagContact

Amazon Elastic Kubernetes Service

• eks:AssociateAccessPolicy
• eks:CreateAccessEntry
• eks:DeleteAccessEntry
• eks:DescribeAccessEntry
• eks:DisassociateAccessPolicy
• eks:ListAccessEntries
• eks:ListAccessPolicies
• eks:ListAssociatedAccessPolicies
• eks:UpdateAccessEntry

AWS Billing Conductor

• billingconductor:GetBillingGroupCostReport

Amazon EC2 Image Builder

• imagebuilder:CreateWorkflow
• imagebuilder:DeleteWorkflow
• imagebuilder:GetWorkflow
• imagebuilder:ListWaitingWorkflowSteps
• imagebuilder:ListWorkflowBuildVersions
• imagebuilder:ListWorkflows
• imagebuilder:SendWorkflowStepAction

Amazon Monitron

• monitron:CreateProjectUserAssociation
• monitron:CreateUserAccessRoleAssociation
• monitron:DeleteProjectUserAssociation
• monitron:DeleteUserAccessRoleAssociation
• monitron:ListProjectUserAssociations
• monitron:ListUserAccessRoleAssociations

Amazon Lex V2

• lex:DescribeBotResourceGeneration
• lex:GenerateBotElement
• lex:ListBotResourceGenerations
• lex:StartBotResourceGeneration

AWS Cost and Usage Report

• cur:ListTagsForResource
• cur:TagResource
• cur:UntagResource

Amazon FinSpace

• finspace:CreateKxDataview
• finspace:CreateKxScalingGroup
• finspace:CreateKxVolume
• finspace:DeleteKxDataview
• finspace:DeleteKxScalingGroup
• finspace:DeleteKxVolume
• finspace:GetKxDataview
• finspace:GetKxScalingGroup
• finspace:GetKxVolume
• finspace:ListKxDataviews
• finspace:ListKxScalingGroups
• finspace:ListKxVolumes
• finspace:UpdateKxDataview
• finspace:UpdateKxVolume

Amazon Athena

• athena:CancelQueryExecution
• athena:GetCatalogs
• athena:GetExecutionEngine
• athena:GetExecutionEngines
• athena:GetNamespace
• athena:GetNamespaces
• athena:GetQueryExecutions
• athena:GetTable
• athena:GetTables
• athena:RunQuery

Amazon CloudFront

• cloudfront:CreateKeyValueStore
• cloudfront:DeleteKeyValueStore
• cloudfront:DescribeKeyValueStore
• cloudfront:ListKeyValueStores
• cloudfront:UpdateKeyValueStore

Amazon Connect

• connect:CreatePersistentContactAssociation

AWS Glue

• glue:BatchGetTableOptimizer
• glue:CreateTableOptimizer
• glue:DeleteTableOptimizer
• glue:GetColumnStatisticsTaskRun
• glue:GetColumnStatisticsTaskRuns
• glue:GetTableOptimizer
• glue:ListColumnStatisticsTaskRuns
• glue:ListTableOptimizerRuns
• glue:PassConnection
• glue:StartColumnStatisticsTaskRun
• glue:StopColumnStatisticsTaskRun
• glue:UpdateTableOptimizer

Amazon QuickSight

• quicksight:DeleteIdentityPropagationConfig
• quicksight:ListIdentityPropagationConfigs
• quicksight:UpdateIdentityPropagationConfig

AWS Fault Injection Service

• fis:CreateExperimentTemplate
• fis:CreateTargetAccountConfiguration
• fis:DeleteExperimentTemplate
• fis:DeleteTargetAccountConfiguration
• fis:GetAction
• fis:GetExperiment
• fis:GetExperimentTargetAccountConfiguration
• fis:GetExperimentTemplate
• fis:GetTargetAccountConfiguration
• fis:GetTargetResourceType
• fis:InjectApiInternalError
• fis:InjectApiThrottleError
• fis:InjectApiUnavailableError
• fis:ListActions
• fis:ListExperimentResolvedTargets
• fis:ListExperimentTargetAccountConfigurations
• fis:ListExperimentTemplates
• fis:ListExperiments
• fis:ListTagsForResource
• fis:ListTargetAccountConfigurations
• fis:ListTargetResourceTypes
• fis:StartExperiment
• fis:StopExperiment
• fis:TagResource
• fis:UntagResource
• fis:UpdateExperimentTemplate
• fis:UpdateTargetAccountConfiguration

AWS Application Transformation Service

• application-transformation:GetContainerization
• application-transformation:GetDeployment
• application-transformation:StartContainerization
• application-transformation:StartDeployment

AWS AppSync

• appsync:GetDataSourceIntrospection
• appsync:StartDataSourceIntrospection

AWS Backup

• backup:CreateRestoreTestingPlan
• backup:CreateRestoreTestingSelection
• backup:DeleteRestoreTestingPlan
• backup:DeleteRestoreTestingSelection
• backup:GetRestoreJobMetadata
• backup:GetRestoreTestingInferredMetadata
• backup:GetRestoreTestingPlan
• backup:GetRestoreTestingSelection
• backup:ListRestoreJobsByProtectedResource
• backup:ListRestoreTestingPlans
• backup:ListRestoreTestingSelections
• backup:PutRestoreValidationResult
• backup:UpdateRestoreTestingPlan
• backup:UpdateRestoreTestingSelection

Amazon Bedrock

• bedrock:CreateGuardrail
• bedrock:CreateGuardrailVersion
• bedrock:CreateModelEvaluationJob
• bedrock:CreateModelInvocationJob
• bedrock:DeleteAgent
• bedrock:DeleteAgentActionGroup
• bedrock:DeleteAgentAlias
• bedrock:DeleteAgentVersion
• bedrock:DeleteGuardrail
• bedrock:GetGuardrail
• bedrock:GetModelEvaluationJob
• bedrock:GetModelInvocationJob
• bedrock:ListGuardrails
• bedrock:ListModelEvaluationJobs
• bedrock:ListModelInvocationJobs
• bedrock:PrepareAgent
• bedrock:Retrieve
• bedrock:RetrieveAndGenerate
• bedrock:StopModelInvocationJob
• bedrock:UpdateGuardrail

AWS Clean Rooms

• cleanrooms:CreateConfiguredAudienceModelAssociation
• cleanrooms:CreatePrivacyBudgetTemplate
• cleanrooms:DeleteConfiguredAudienceModelAssociation
• cleanrooms:DeletePrivacyBudgetTemplate
• cleanrooms:GetCollaborationConfiguredAudienceModelAssociation
• cleanrooms:GetCollaborationPrivacyBudgetTemplate
• cleanrooms:GetConfiguredAudienceModelAssociation
• cleanrooms:GetPrivacyBudgetTemplate
• cleanrooms:ListCollaborationConfiguredAudienceModelAssociations
• cleanrooms:ListCollaborationPrivacyBudgetTemplates
• cleanrooms:ListCollaborationPrivacyBudgets
• cleanrooms:ListConfiguredAudienceModelAssociations
• cleanrooms:ListPrivacyBudgetTemplates
• cleanrooms:ListPrivacyBudgets
• cleanrooms:PreviewPrivacyImpact
• cleanrooms:UpdateConfiguredAudienceModelAssociation
• cleanrooms:UpdatePrivacyBudgetTemplate

AWS CloudTrail

• cloudtrail:DisableFederation
• cloudtrail:EnableFederation
• cloudtrail:GetEventDataStoreData

Amazon CloudWatch

• cloudwatch:BatchGetServiceLevelIndicatorReport
• cloudwatch:BatchGetServiceLevelObjectiveBudgetReport
• cloudwatch:CreateServiceLevelObjective
• cloudwatch:DeleteServiceLevelObjective
• cloudwatch:EnableTopologyDiscovery
• cloudwatch:GenerateQuery
• cloudwatch:GetService
• cloudwatch:GetServiceData
• cloudwatch:GetServiceLevelObjective
• cloudwatch:GetTopologyDiscoveryStatus
• cloudwatch:GetTopologyMap
• cloudwatch:ListServiceLevelObjectives
• cloudwatch:ListServices
• cloudwatch:UpdateServiceLevelObjective

Amazon CloudWatch Logs

• logs:CreateLogAnomalyDetector
• logs:DeleteLogAnomalyDetector
• logs:GetLogAnomalyDetector
• logs:ListAnomalies
• logs:ListLogAnomalyDetectors
• logs:UpdateAnomaly
• logs:UpdateLogAnomalyDetector

Amazon CodeCatalyst

• codecatalyst:AssociateIdentityCenterApplicationToSpace
• codecatalyst:AssociateIdentityToIdentityCenterApplication
• codecatalyst:BatchAssociateIdentitiesToIdentityCenterApplication
• codecatalyst:BatchDisassociateIdentitiesFromIdentityCenterApplication
• codecatalyst:CreateIdentityCenterApplication
• codecatalyst:CreateSpace
• codecatalyst:CreateSpaceAdminRoleAssignment
• codecatalyst:DeleteIdentityCenterApplication
• codecatalyst:DisassociateIdentityCenterApplicationFromSpace
• codecatalyst:DisassociateIdentityFromIdentityCenterApplication
• codecatalyst:GetIdentityCenterApplication
• codecatalyst:ListIdentityCenterApplications
• codecatalyst:ListIdentityCenterApplicationsForSpace
• codecatalyst:ListSpacesForIdentityCenterApplication
• codecatalyst:SynchronizeIdentityCenterApplication
• codecatalyst:UpdateIdentityCenterApplication

AWS CodeStar Connections

• codestar-connections:CreateRepositoryLink
• codestar-connections:CreateSyncConfiguration
• codestar-connections:DeleteRepositoryLink
• codestar-connections:DeleteSyncConfiguration
• codestar-connections:GetRepositoryLink
• codestar-connections:GetRepositorySyncStatus
• codestar-connections:GetResourceSyncStatus
• codestar-connections:GetSyncBlockerSummary
• codestar-connections:GetSyncConfiguration
• codestar-connections:ListRepositoryLinks
• codestar-connections:ListRepositorySyncDefinitions
• codestar-connections:ListSyncConfigurations
• codestar-connections:PassRepository
• codestar-connections:UpdateRepositoryLink
• codestar-connections:UpdateSyncBlocker
• codestar-connections:UpdateSyncConfiguration

Amazon CodeWhisperer

• codewhisperer:ListCustomizationVersions

Amazon Connect

• connect:AssociateFlow
• connect:DisassociateFlow
• connect:GetFlowAssociation
• connect:ImportPhoneNumber
• connect:ListFlowAssociations
• connect:ListRealtimeContactAnalysisSegmentsV2
• connect:SendChatIntegrationEvent
• connect:StartWebRTCContact

Amazon Connect Customer Profiles

• profile:DetectProfileObjectType

AWS Control Tower

• controltower:CreateLandingZone
• controltower:GetLandingZone
• controltower:GetLandingZoneOperation
• controltower:ListLandingZones
• controltower:ResetLandingZone
• controltower:UpdateEnabledControl
• controltower:UpdateLandingZone

Amazon DataZone

• datazone:GetMetadataGenerationRun
• datazone:ListMetadataGenerationRuns
• datazone:StartMetadataGenerationRun
• datazone:StopMetadataGenerationRun

Amazon Detective

• detective:GetInvestigation
• detective:InvokeAssistant
• detective:ListIndicators
• detective:ListInvestigations
• detective:StartInvestigation
• detective:UpdateInvestigationState

Amazon EC2

• ec2:AssociateIpamByoasn
• ec2:DeprovisionIpamByoasn
• ec2:DescribeCapacityBlockOfferings
• ec2:DescribeInstanceTopology
• ec2:DescribeIpamByoasn
• ec2:DescribeLockedSnapshots
• ec2:DisableSnapshotBlockPublicAccess
• ec2:DisassociateIpamByoasn
• ec2:EnableSnapshotBlockPublicAccess
• ec2:GetIpamDiscoveredPublicAddresses
• ec2:GetSnapshotBlockPublicAccessState
• ec2:LockSnapshot
• ec2:ProvisionIpamByoasn
• ec2:PurchaseCapacityBlock
• ec2:UnlockSnapshot

Amazon EC2 Image Builder

• imagebuilder:CancelLifecycleExecution
• imagebuilder:CreateLifecyclePolicy
• imagebuilder:DeleteLifecyclePolicy
• imagebuilder:GetLifecycleExecution
• imagebuilder:GetLifecyclePolicy
• imagebuilder:ListLifecycleExecutionResources
• imagebuilder:ListLifecycleExecutions
• imagebuilder:ListLifecyclePolicies
• imagebuilder:StartResourceStateUpdate
• imagebuilder:UpdateLifecyclePolicy

Amazon Elastic Container Registry

• ecr:CreateRepositoryCreationTemplate
• ecr:DeleteRepositoryCreationTemplate
• ecr:DescribeRepositoryCreationTemplate
• ecr:UpdatePullThroughCacheRule
• ecr:ValidatePullThroughCacheRule

Amazon Elastic File System

• elasticfilesystem:UpdateFileSystemProtection

Amazon Elastic Kubernetes Service

• eks:CreatePodIdentityAssociation
• eks:DeletePodIdentityAssociation
• eks:DescribePodIdentityAssociation
• eks:ListPodIdentityAssociations
• eks:UpdatePodIdentityAssociation

AWS Elastic Load Balancing V2

• elasticloadbalancing:AddTrustStoreRevocations
• elasticloadbalancing:CreateTrustStore
• elasticloadbalancing:DeleteTrustStore
• elasticloadbalancing:DescribeTrustStoreAssociations
• elasticloadbalancing:DescribeTrustStoreRevocations
• elasticloadbalancing:DescribeTrustStores
• elasticloadbalancing:GetTrustStoreCaCertificatesBundle
• elasticloadbalancing:GetTrustStoreRevocationContent
• elasticloadbalancing:ModifyTrustStore
• elasticloadbalancing:RemoveTrustStoreRevocations

Amazon ElastiCache

• elasticache:CopyServerlessCacheSnapshot
• elasticache:CreateServerlessCache
• elasticache:CreateServerlessCacheSnapshot
• elasticache:DeleteServerlessCache
• elasticache:DeleteServerlessCacheSnapshot
• elasticache:DescribeServerlessCacheSnapshots
• elasticache:DescribeServerlessCaches
• elasticache:ExportServerlessCacheSnapshot
• elasticache:InterruptClusterAzPower
• elasticache:ModifyServerlessCache

Amazon EventBridge

• events:RetrieveConnectionCredentials

Amazon FSx

• fsx:CopySnapshotAndUpdateVolume
• fsx:DescribeSharedVpcConfiguration
• fsx:UpdateSharedVpcConfiguration

AWS Glue

• glue:GetCompletion
• glue:SendFeedback
• glue:StartCompletion

AWS IAM Access Analyzer

• access-analyzer:CheckAccessNotGranted
• access-analyzer:CheckNoNewAccess
• access-analyzer:GetFindingsStatistics

AWS IAM Identity Center (successor to AWS Single Sign-On)

• sso:CreateApplication
• sso:CreateApplicationAssignment
• sso:CreateInstance
• sso:CreateTrustedTokenIssuer
• sso:DeleteApplication
• sso:DeleteApplicationAccessScope
• sso:DeleteApplicationAssignment
• sso:DeleteApplicationAuthenticationMethod
• sso:DeleteApplicationGrant
• sso:DeleteInstance
• sso:DeleteTrustedTokenIssuer
• sso:DescribeApplication
• sso:DescribeApplicationAssignment
• sso:DescribeApplicationProvider
• sso:DescribeInstance
• sso:DescribeTrustedTokenIssuer
• sso:GetApplicationAccessScope
• sso:GetApplicationAssignmentConfiguration
• sso:GetApplicationAuthenticationMethod
• sso:GetApplicationGrant
• sso:ListAccountAssignmentsForPrincipal
• sso:ListApplicationAccessScopes
• sso:ListApplicationAssignments
• sso:ListApplicationAssignmentsForPrincipal
• sso:ListApplicationAuthenticationMethods
• sso:ListApplicationGrants
• sso:ListApplicationProviders
• sso:ListTrustedTokenIssuers
• sso:PutApplicationAccessScope
• sso:PutApplicationAuthenticationMethod
• sso:PutApplicationGrant
• sso:UpdateApplication
• sso:UpdateInstance
• sso:UpdateTrustedTokenIssuer

Amazon Interactive Video Service

• ivs:CreateEncoderConfiguration
• ivs:CreateStorageConfiguration
• ivs:DeleteEncoderConfiguration
• ivs:DeleteStorageConfiguration
• ivs:GetComposition
• ivs:GetEncoderConfiguration
• ivs:GetStorageConfiguration
• ivs:ListCompositions
• ivs:ListEncoderConfigurations
• ivs:ListStorageConfigurations
• ivs:StartComposition
• ivs:StopComposition

AWS IoT SiteWise

• iotsitewise:CreateAssetModelCompositeModel
• iotsitewise:DeleteAssetModelCompositeModel
• iotsitewise:DescribeAction
• iotsitewise:DescribeAssetCompositeModel
• iotsitewise:DescribeAssetModelCompositeModel
• iotsitewise:EnableSiteWiseIntegration
• iotsitewise:ExecuteAction
• iotsitewise:ExecuteQuery
• iotsitewise:ListActions
• iotsitewise:ListAssetModelCompositeModels
• iotsitewise:ListCompositionRelationships
• iotsitewise:UpdateAssetModelCompositeModel

AWS IoT TwinMaker

• iottwinmaker:CancelMetadataTransferJob
• iottwinmaker:CreateMetadataTransferJob
• iottwinmaker:GetMetadataTransferJob
• iottwinmaker:ListComponents
• iottwinmaker:ListMetadataTransferJobs
• iottwinmaker:ListProperties

Amazon Kinesis Data Streams

• kinesis:DeleteResourcePolicy
• kinesis:GetResourcePolicy
• kinesis:PutResourcePolicy

Amazon Managed Blockchain

• managedblockchain:InvokeRpcPolygonMainnet
• managedblockchain:InvokeRpcPolygonMumbaiTestnet

Amazon Managed Service for Prometheus

• aps:CreateScraper
• aps:DeleteScraper
• aps:DescribeScraper
• aps:GetDefaultScraperConfiguration
• aps:ListScrapers

Amazon OpenSearch Service

• es:AddDataSource
• es:CancelDomainConfigChange
• es:DeleteDataSource
• es:GetDataSource
• es:ListDataSources
• es:UpdateDataSource

Amazon Personalize

• personalize:GetActionRecommendations
• personalize:PutActionInteractions
• personalize:PutActions

Amazon Pinpoint SMS Voice V2

• sms-voice:CreateRegistration
• sms-voice:CreateRegistrationAssociation
• sms-voice:CreateRegistrationAttachment
• sms-voice:CreateRegistrationVersion
• sms-voice:CreateVerifiedDestinationNumber
• sms-voice:DeleteRegistration
• sms-voice:DeleteRegistrationAttachment
• sms-voice:DeleteRegistrationFieldValue
• sms-voice:DeleteVerifiedDestinationNumber
• sms-voice:DescribeRegistrationAttachments
• sms-voice:DescribeRegistrationFieldDefinitions
• sms-voice:DescribeRegistrationFieldValues
• sms-voice:DescribeRegistrationSectionDefinitions
• sms-voice:DescribeRegistrationTypeDefinitions
• sms-voice:DescribeRegistrationVersions
• sms-voice:DescribeRegistrations
• sms-voice:DescribeVerifiedDestinationNumbers
• sms-voice:DiscardRegistrationVersion
• sms-voice:ListRegistrationAssociations
• sms-voice:PutRegistrationFieldValue
• sms-voice:ReleaseSenderId
• sms-voice:RequestSenderId
• sms-voice:SendDestinationNumberVerificationCode
• sms-voice:SubmitRegistrationVersion
• sms-voice:UpdateSenderId
• sms-voice:VerifyDestinationNumber

Amazon QuickSight

• quicksight:CreateRoleMembership
• quicksight:DeleteRoleCustomPermission
• quicksight:DeleteRoleMembership
• quicksight:DescribeRoleCustomPermission
• quicksight:ListRoleMemberships
• quicksight:UpdateRoleCustomPermission

Amazon Redshift

• redshift:CreateRedshiftIdcApplication
• redshift:DeleteRedshiftIdcApplication
• redshift:DescribeRedshiftIdcApplications
• redshift:ModifyRedshiftIdcApplication

Amazon Redshift Serverless

• redshift-serverless:CreateScheduledAction
• redshift-serverless:CreateSnapshotCopyConfiguration
• redshift-serverless:DeleteScheduledAction
• redshift-serverless:DeleteSnapshotCopyConfiguration
• redshift-serverless:GetScheduledAction
• redshift-serverless:ListScheduledActions
• redshift-serverless:ListSnapshotCopyConfigurations
• redshift-serverless:RestoreTableFromRecoveryPoint
• redshift-serverless:UpdateScheduledAction
• redshift-serverless:UpdateSnapshotCopyConfiguration

Amazon Route 53 Application Recovery Controller - Zonal Shift

• arc-zonal-shift:CreatePracticeRunConfiguration
• arc-zonal-shift:DeletePracticeRunConfiguration
• arc-zonal-shift:ListAutoshifts
• arc-zonal-shift:UpdatePracticeRunConfiguration
• arc-zonal-shift:UpdateZonalAutoshiftConfiguration

Amazon S3

• s3:AssociateAccessGrantsIdentityCenter
• s3:CreateAccessGrant
• s3:CreateAccessGrantsInstance
• s3:CreateAccessGrantsLocation
• s3:DeleteAccessGrant
• s3:DeleteAccessGrantsInstance
• s3:DeleteAccessGrantsInstanceResourcePolicy
• s3:DeleteAccessGrantsLocation
• s3:DissociateAccessGrantsIdentityCenter
• s3:GetAccessGrant
• s3:GetAccessGrantsInstance
• s3:GetAccessGrantsInstanceForPrefix
• s3:GetAccessGrantsInstanceResourcePolicy
• s3:GetAccessGrantsLocation
• s3:GetDataAccess
• s3:ListAccessGrants
• s3:ListAccessGrantsInstances
• s3:ListAccessGrantsLocations
• s3:PutAccessGrantsInstanceResourcePolicy
• s3:UpdateAccessGrantsLocation

Amazon SageMaker

• sagemaker:CreateCluster
• sagemaker:DeleteCluster
• sagemaker:DescribeCluster
• sagemaker:DescribeClusterNode
• sagemaker:ListClusterNodes
• sagemaker:ListClusters
• sagemaker:UpdateCluster

AWS Secrets Manager

• secretsmanager:BatchGetSecretValue

AWS Security Hub

• securityhub:BatchGetConfigurationPolicyAssociations
• securityhub:CreateConfigurationPolicy
• securityhub:DeleteConfigurationPolicy
• securityhub:GetConfigurationPolicy
• securityhub:GetConfigurationPolicyAssociation
• securityhub:GetSecurityControlDefinition
• securityhub:ListConfigurationPolicies
• securityhub:ListConfigurationPolicyAssociations
• securityhub:StartConfigurationPolicyAssociation
• securityhub:StartConfigurationPolicyDisassociation
• securityhub:UpdateConfigurationPolicy
• securityhub:UpdateSecurityControl

AWS Security Token Service

• sts:SetContext

AWS SQL Workbench

• sqlworkbench:GetQSqlRecommendations
• sqlworkbench:UpdateAccountQSqlSettings

AWS Step Functions

• states:InvokeHTTPEndpoint
• states:RevealSecrets
• states:TestState

Amazon Transcribe

• transcribe:DeleteMedicalScribeJob
• transcribe:GetMedicalScribeJob
• transcribe:ListMedicalScribeJobs
• transcribe:StartMedicalScribeJob

AWS Trusted Advisor

• trustedadvisor:GetOrganizationRecommendation
• trustedadvisor:GetRecommendation
• trustedadvisor:ListChecks
• trustedadvisor:ListOrganizationRecommendationAccounts
• trustedadvisor:ListOrganizationRecommendationResources
• trustedadvisor:ListOrganizationRecommendations
• trustedadvisor:ListRecommendationResources
• trustedadvisor:ListRecommendations
• trustedadvisor:UpdateOrganizationRecommendationLifecycle
• trustedadvisor:UpdateRecommendationLifecycle

AWS B2B Data Interchange

• b2bi:CreateCapability
• b2bi:CreatePartnership
• b2bi:CreateProfile
• b2bi:CreateTransformer
• b2bi:DeleteCapability
• b2bi:DeletePartnership
• b2bi:DeleteProfile
• b2bi:DeleteTransformer
• b2bi:GetCapability
• b2bi:GetPartnership
• b2bi:GetProfile
• b2bi:GetTransformer
• b2bi:GetTransformerJob
• b2bi:ListCapabilities
• b2bi:ListPartnerships
• b2bi:ListProfiles
• b2bi:ListTagsForResource
• b2bi:ListTransformers
• b2bi:StartTransformerJob
• b2bi:TagResource
• b2bi:TestMapping
• b2bi:TestParsing
• b2bi:UntagResource
• b2bi:UpdateCapability
• b2bi:UpdatePartnership
• b2bi:UpdateProfile
• b2bi:UpdateTransformer

AWS Billing and Cost Management And Cost Management Data Exports

• bcm-data-exports:CreateExport
• bcm-data-exports:DeleteExport
• bcm-data-exports:GetExecution
• bcm-data-exports:GetExport
• bcm-data-exports:GetTable
• bcm-data-exports:ListExecutions
• bcm-data-exports:ListExports
• bcm-data-exports:ListTables
• bcm-data-exports:ListTagsForResource
• bcm-data-exports:TagResource
• bcm-data-exports:UntagResource
• bcm-data-exports:UpdateExport

AWS Clean Rooms ML

• cleanrooms-ml:CreateAudienceModel
• cleanrooms-ml:CreateConfiguredAudienceModel
• cleanrooms-ml:CreateTrainingDataset
• cleanrooms-ml:DeleteAudienceGenerationJob
• cleanrooms-ml:DeleteAudienceModel
• cleanrooms-ml:DeleteConfiguredAudienceModel
• cleanrooms-ml:DeleteConfiguredAudienceModelPolicy
• cleanrooms-ml:DeleteTrainingDataset
• cleanrooms-ml:GetAudienceGenerationJob
• cleanrooms-ml:GetAudienceModel
• cleanrooms-ml:GetConfiguredAudienceModel
• cleanrooms-ml:GetConfiguredAudienceModelPolicy
• cleanrooms-ml:GetTrainingDataset
• cleanrooms-ml:ListAudienceExportJobs
• cleanrooms-ml:ListAudienceGenerationJobs
• cleanrooms-ml:ListAudienceModels
• cleanrooms-ml:ListConfiguredAudienceModels
• cleanrooms-ml:ListTagsForResource
• cleanrooms-ml:ListTrainingDatasets
• cleanrooms-ml:PutConfiguredAudienceModelPolicy
• cleanrooms-ml:StartAudienceExportJob
• cleanrooms-ml:StartAudienceGenerationJob
• cleanrooms-ml:TagResource
• cleanrooms-ml:UnTagResource
• cleanrooms-ml:UpdateConfiguredAudienceModel

Amazon CloudFront KeyValueStore

• cloudfront-keyvaluestore:DeleteKey
• cloudfront-keyvaluestore:DescribeKeyValueStore
• cloudfront-keyvaluestore:GetKey
• cloudfront-keyvaluestore:ListKeys
• cloudfront-keyvaluestore:PutKey
• cloudfront-keyvaluestore:UpdateKeys

AWS Cost Optimization Hub

• cost-optimization-hub:GetPreferences
• cost-optimization-hub:GetRecommendation
• cost-optimization-hub:ListEnrollmentStatuses
• cost-optimization-hub:ListRecommendationSummaries
• cost-optimization-hub:ListRecommendations
• cost-optimization-hub:UpdateEnrollmentStatus
• cost-optimization-hub:UpdatePreferences

AWS Diagnostic tools

• ts:GetExecution
• ts:GetExecutionOutput
• ts:GetTool
• ts:ListExecutions
• ts:ListTagsForResource
• ts:ListTools
• ts:StartExecution
• ts:TagResource
• ts:UntagResource

Amazon EKS Auth

• eks-auth:AssumeRoleForPodIdentity

AWS IAM Identity Center OIDC service

• sso-oauth:CreateTokenWithIAM

Amazon InspectorScan

• inspector-scan:ScanSbom

AWS Marketplace Deployment Service

• aws-marketplace:ListTagsForResource
• aws-marketplace:PutDeploymentParameter
• aws-marketplace:TagResource
• aws-marketplace:UntagResource

Amazon Neptune Analytics

• neptune-graph:CancelImportTask
• neptune-graph:CancelQuery
• neptune-graph:CreateGraph
• neptune-graph:CreateGraphSnapshot
• neptune-graph:CreateGraphUsingImportTask
• neptune-graph:CreatePrivateGraphEndpoint
• neptune-graph:DeleteDataViaQuery
• neptune-graph:DeleteGraph
• neptune-graph:DeleteGraphSnapshot
• neptune-graph:DeletePrivateGraphEndpoint
• neptune-graph:GetEngineStatus
• neptune-graph:GetGraph
• neptune-graph:GetGraphSnapshot
• neptune-graph:GetGraphSummary
• neptune-graph:GetImportTask
• neptune-graph:GetPrivateGraphEndpoint
• neptune-graph:GetQueryStatus
• neptune-graph:GetStatisticsStatus
• neptune-graph:ListGraphSnapshots
• neptune-graph:ListGraphs
• neptune-graph:ListImportTasks
• neptune-graph:ListPrivateGraphEndpoints
• neptune-graph:ListQueries
• neptune-graph:ListTagsForResource
• neptune-graph:ReadDataViaQuery
• neptune-graph:ResetGraph
• neptune-graph:RestoreGraphFromSnapshot
• neptune-graph:TagResource
• neptune-graph:UntagResource
• neptune-graph:UpdateGraph
• neptune-graph:WriteDataViaQuery

AWS Network Manager Chat

• networkmanager-chat:CancelMessageResponse
• networkmanager-chat:CreateConversation
• networkmanager-chat:DeleteConversation
• networkmanager-chat:ListConversationMessages
• networkmanager-chat:ListConversations
• networkmanager-chat:NotifyConversationIsActive
• networkmanager-chat:SendConversationMessage

Amazon One Enterprise

• one:CreateDeviceActivationQrCode
• one:CreateDeviceConfigurationTemplate
• one:CreateDeviceInstance
• one:CreateDeviceInstanceConfiguration
• one:CreateSite
• one:DeleteAssociatedDevice
• one:DeleteDeviceConfigurationTemplate
• one:DeleteDeviceInstance
• one:DeleteSite
• one:DeleteUser
• one:GetDeviceConfigurationTemplate
• one:GetDeviceInstance
• one:GetDeviceInstanceConfiguration
• one:GetSite
• one:GetSiteAddress
• one:ListDeviceConfigurationTemplates
• one:ListDeviceInstances
• one:ListSites
• one:ListTagsForResource
• one:ListUsers
• one:RebootDevice
• one:TagResource
• one:UntagResource
• one:UpdateDeviceConfigurationTemplate
• one:UpdateDeviceInstance
• one:UpdateSite
• one:UpdateSiteAddress

Amazon Q

• q:GetConversation
• q:GetTroubleshootingResults
• q:SendMessage
• q:StartConversation
• q:StartTroubleshootingAnalysis
• q:StartTroubleshootingResolutionExplanation

Amazon Q Business

• qbusiness:AddUserLicenses
• qbusiness:BatchDeleteDocument
• qbusiness:BatchPutDocument
• qbusiness:Chat
• qbusiness:ChatSync
• qbusiness:CreateApplication
• qbusiness:CreateDataSource
• qbusiness:CreateIndex
• qbusiness:CreateLicense
• qbusiness:CreatePlugin
• qbusiness:CreateRetriever
• qbusiness:CreateUser
• qbusiness:CreateWebExperience
• qbusiness:DeleteApplication
• qbusiness:DeleteChatControlsConfiguration
• qbusiness:DeleteConversation
• qbusiness:DeleteDataSource
• qbusiness:DeleteGroup
• qbusiness:DeleteIndex
• qbusiness:DeletePlugin
• qbusiness:DeleteRetriever
• qbusiness:DeleteUser
• qbusiness:DeleteWebExperience
• qbusiness:GetApplication
• qbusiness:GetChatControlsConfiguration
• qbusiness:GetDataSource
• qbusiness:GetGroup
• qbusiness:GetIndex
• qbusiness:GetLicense
• qbusiness:GetPlugin
• qbusiness:GetRetriever
• qbusiness:GetUser
• qbusiness:GetWebExperience
• qbusiness:ListApplications
• qbusiness:ListConversations
• qbusiness:ListDataSourceSyncJobs
• qbusiness:ListDataSources
• qbusiness:ListDocuments
• qbusiness:ListGroups
• qbusiness:ListIndices
• qbusiness:ListMessages
• qbusiness:ListPlugins
• qbusiness:ListRetrievers
• qbusiness:ListTagsForResource
• qbusiness:ListUserLicenses
• qbusiness:ListWebExperiences
• qbusiness:PutFeedback
• qbusiness:PutGroup
• qbusiness:RemoveUserLicenses
• qbusiness:StartDataSourceSyncJob
• qbusiness:StopDataSourceSyncJob
• qbusiness:TagResource
• qbusiness:UntagResource
• qbusiness:UpdateApplication
• qbusiness:UpdateChatControlsConfiguration
• qbusiness:UpdateDataSource
• qbusiness:UpdateIndex
• qbusiness:UpdatePlugin
• qbusiness:UpdateRetriever
• qbusiness:UpdateUser
• qbusiness:UpdateWebExperience

Amazon Q in Connect

• wisdom:CreateAssistant
• wisdom:CreateAssistantAssociation
• wisdom:CreateContent
• wisdom:CreateKnowledgeBase
• wisdom:CreateQuickResponse
• wisdom:CreateSession
• wisdom:DeleteAssistant
• wisdom:DeleteAssistantAssociation
• wisdom:DeleteContent
• wisdom:DeleteImportJob
• wisdom:DeleteKnowledgeBase
• wisdom:DeleteQuickResponse
• wisdom:GetAssistant
• wisdom:GetAssistantAssociation
• wisdom:GetContent
• wisdom:GetContentSummary
• wisdom:GetImportJob
• wisdom:GetKnowledgeBase
• wisdom:GetQuickResponse
• wisdom:GetRecommendations
• wisdom:GetSession
• wisdom:ListAssistantAssociations
• wisdom:ListAssistants
• wisdom:ListContents
• wisdom:ListImportJobs
• wisdom:ListKnowledgeBases
• wisdom:ListQuickResponses
• wisdom:ListTagsForResource
• wisdom:NotifyRecommendationsReceived
• wisdom:PutFeedback
• wisdom:QueryAssistant
• wisdom:RemoveKnowledgeBaseTemplateUri
• wisdom:SearchContent
• wisdom:SearchQuickResponses
• wisdom:SearchSessions
• wisdom:StartContentUpload
• wisdom:StartImportJob
• wisdom:TagResource
• wisdom:UntagResource
• wisdom:UpdateContent
• wisdom:UpdateKnowledgeBaseTemplateUri
• wisdom:UpdateQuickResponse

AWS re:Post Private

• repostspace:CreateSpace
• repostspace:DeleteSpace
• repostspace:DeregisterAdmin
• repostspace:GetSpace
• repostspace:ListSpaces
• repostspace:ListTagsForResource
• repostspace:RegisterAdmin
• repostspace:SendInvites
• repostspace:TagResource
• repostspace:UntagResource
• repostspace:UpdateSpace

Amazon S3 Express

• s3express:CreateBucket
• s3express:CreateSession
• s3express:DeleteBucket
• s3express:DeleteBucketPolicy
• s3express:GetBucketPolicy
• s3express:ListAllMyDirectoryBuckets
• s3express:PutBucketPolicy

Amazon WorkSpaces Thin Client

• thinclient:CreateEnvironment
• thinclient:DeleteDevice
• thinclient:DeleteEnvironment
• thinclient:DeregisterDevice
• thinclient:GetDevice
• thinclient:GetEnvironment
• thinclient:GetSoftwareSet
• thinclient:ListDeviceSessions
• thinclient:ListDevices
• thinclient:ListEnvironments
• thinclient:ListSoftwareSets
• thinclient:ListTagsForResource
• thinclient:TagResource
• thinclient:UntagResource
• thinclient:UpdateDevice
• thinclient:UpdateEnvironment
• thinclient:UpdateSoftwareSet

AWS Backup

• backup:ListBackupJobSummaries
• backup:ListCopyJobSummaries
• backup:ListRestoreJobSummaries

Amazon Connect Wisdom

• wisdom:PutFeedback

AWS Control Tower

• controltower:ListTagsForResource
• controltower:TagResource
• controltower:UntagResource

AWS Cost Explorer Service

• ce:GetApproximateUsageRecords

Amazon FinSpace

• finspace:UpdateKxClusterCodeConfiguration

Amazon Redshift

• redshift:DeleteResourcePolicy
• redshift:DescribeInboundIntegrations
• redshift:GetResourcePolicy
• redshift:PutResourcePolicy

AWS Resource Explorer

• resource-explorer-2:GetAccountLevelServiceConfiguration
• resource-explorer-2:ListIndexesForMembers

Amazon S3

• s3:CreateStorageLensGroup
• s3:DeleteStorageLensGroup
• s3:GetStorageLensGroup
• s3:ListStorageLensGroups
• s3:ListTagsForResource
• s3:TagResource
• s3:UntagResource
• s3:UpdateStorageLensGroup

AWS Step Functions

• states:RedriveExecution

AWS Systems Manager Incident Manager

• ssm-incidents:BatchGetIncidentFindings
• ssm-incidents:ListIncidentFindings

Amazon CodeWhisperer

• codewhisperer:AllowVendedLogDeliveryForResource

AWS Launch Wizard

• launchwizard:CreateDeployment
• launchwizard:DeleteDeployment
• launchwizard:GetDeployment
• launchwizard:GetResourceRecommendation
• launchwizard:GetSettingsSet
• launchwizard:GetWorkload
• launchwizard:GetWorkloadAsset
• launchwizard:ListAllowedResources
• launchwizard:ListDeploymentEvents
• launchwizard:ListDeployments
• launchwizard:ListResourceCostEstimates
• launchwizard:ListWorkloadDeploymentPatterns
• launchwizard:PutSettingsSet

AWS Resource Groups

• resource-groups:AssociateResource
• resource-groups:DisassociateResource

Amazon CloudWatch Logs

• logs:CreateDelivery
• logs:DeleteDelivery
• logs:DeleteDeliveryDestination
• logs:DeleteDeliveryDestinationPolicy
• logs:DeleteDeliverySource
• logs:DescribeDeliveries
• logs:DescribeDeliveryDestinations
• logs:DescribeDeliverySources
• logs:GetDelivery
• logs:GetDeliveryDestination
• logs:GetDeliveryDestinationPolicy
• logs:GetDeliverySource
• logs:PutDeliveryDestination
• logs:PutDeliveryDestinationPolicy
• logs:PutDeliverySource

Amazon Comprehend

• comprehend:DetectToxicContent

Amazon EC2

• ec2:GetSecurityGroupsForVpc
• ec2:InjectApiError

Amazon Elastic Kubernetes Service

• eks:CreateEksAnywhereSubscription
• eks:DeleteEksAnywhereSubscription
• eks:DescribeEksAnywhereSubscription
• eks:ListEksAnywhereSubscriptions
• eks:UpdateEksAnywhereSubscription

Amazon RDS

• rds:CreateIntegration
• rds:CreateTenantDatabase
• rds:DeleteIntegration
• rds:DeleteTenantDatabase
• rds:DescribeDbSnapshotTenantDatabases
• rds:DescribeIntegrations
• rds:DescribeTenantDatabases
• rds:ModifyTenantDatabase

AWS Partner central account management

• partnercentral-account-management:AssociatePartnerAccount
• partnercentral-account-management:AssociatePartnerUser
• partnercentral-account-management:DisassociatePartnerUser

Amazon Connect

• connect:BatchPutContact

Amazon SageMaker

• sagemaker:CreateInferenceComponent
• sagemaker:DeleteInferenceComponent
• sagemaker:DescribeInferenceComponent
• sagemaker:InvokeEndpointWithResponseStream
• sagemaker:ListInferenceComponents
• sagemaker:UpdateInferenceComponent
• sagemaker:UpdateInferenceComponentRuntimeConfig

Amazon Cognito Identity

• cognito-identity:GetIdentityPoolAnalytics
• cognito-identity:GetIdentityPoolDailyAnalytics
• cognito-identity:GetIdentityProviderDailyAnalytics

AWS Systems Manager

• ssm:DeleteOpsItem

AWS Migration Hub Strategy Recommendations

• migrationhub-strategy:ListAnalyzableServers

Amazon Redshift

• redshift:FailoverPrimaryCompute

Amazon EMR Serverless

• emr-serverless:AccessInteractiveEndpoints

AWS Global Accelerator

• globalaccelerator:CreateCrossAccountAttachment
• globalaccelerator:DeleteCrossAccountAttachment
• globalaccelerator:DescribeCrossAccountAttachment
• globalaccelerator:ListCrossAccountAttachments
• globalaccelerator:ListCrossAccountResourceAccounts
• globalaccelerator:ListCrossAccountResources
• globalaccelerator:UpdateCrossAccountAttachment

AWS Data Exchange

• dataexchange:SendDataSetNotification

AWS DeepRacer

• deepracer:ListLeaderboardEvaluations

Amazon Redshift Serverless

• redshift-serverless:CreateCustomDomainAssociation
• redshift-serverless:DeleteCustomDomainAssociation
• redshift-serverless:GetCustomDomainAssociation
• redshift-serverless:ListCustomDomainAssociations
• redshift-serverless:UpdateCustomDomainAssociation

Amazon EC2

• ec2:DisableImage
• ec2:EnableImage

AWS Application Transformation Service

• application-transformation:GetGroupingAssessment
• application-transformation:GetPortingCompatibilityAssessment
• application-transformation:GetPortingRecommendationAssessment
• application-transformation:GetRuntimeAssessment
• application-transformation:PutLogData
• application-transformation:PutMetricData
• application-transformation:StartGroupingAssessment
• application-transformation:StartPortingCompatibilityAssessment
• application-transformation:StartPortingRecommendationAssessment
• application-transformation:StartRuntimeAssessment

AWS Migration Hub

• mgh:DeleteHomeRegionControl