Changelog

AWS Application Migration Service

• mgn:CreateNetworkMigrationDefinition
• mgn:DeleteNetworkMigrationDefinition
• mgn:GetNetworkMigrationDefinition
• mgn:GetNetworkMigrationMapperSegmentConstruct
• mgn:ListNetworkMigrationAnalyses
• mgn:ListNetworkMigrationAnalysisResults
• mgn:ListNetworkMigrationCodeGenerationSegments
• mgn:ListNetworkMigrationCodeGenerations
• mgn:ListNetworkMigrationDefinitions
• mgn:ListNetworkMigrationDeployedStacks
• mgn:ListNetworkMigrationDeployedStacksDeletions
• mgn:ListNetworkMigrationDeployments
• mgn:ListNetworkMigrationExecutions
• mgn:ListNetworkMigrationMapperSegmentConstructs
• mgn:ListNetworkMigrationMapperSegments
• mgn:ListNetworkMigrationMappings
• mgn:StartNetworkMigrationAnalysis
• mgn:StartNetworkMigrationCodeGeneration
• mgn:StartNetworkMigrationDeployedStacksDeletion
• mgn:StartNetworkMigrationDeployment
• mgn:StartNetworkMigrationMapping
• mgn:UpdateNetworkMigrationDefinition
• mgn:UpdateNetworkMigrationMapperSegment
• mgn:UpdateNetworkMigrationMapperSegmentConstruct

Amazon Cognito User Pools

• cognito-idp:CreateManagedLoginBranding
• cognito-idp:DeleteManagedLoginBranding
• cognito-idp:DescribeManagedLoginBranding
• cognito-idp:DescribeManagedLoginBrandingByClient
• cognito-idp:UpdateManagedLoginBranding

Amazon EC2

• ec2:CancelDeclarativePoliciesReport
• ec2:CreateVpcBlockPublicAccessExclusion
• ec2:DeleteVpcBlockPublicAccessExclusion
• ec2:DescribeCapacityBlockExtensionHistory
• ec2:DescribeCapacityBlockExtensionOfferings
• ec2:DescribeDeclarativePoliciesReports
• ec2:DescribeVpcBlockPublicAccessExclusions
• ec2:DescribeVpcBlockPublicAccessOptions
• ec2:DescribeVpcEndpointAssociations
• ec2:DisableAllowedImagesSettings
• ec2:EnableAllowedImagesSettings
• ec2:ExportVerifiedAccessInstanceClientConfiguration
• ec2:GetAllowedImagesSettings
• ec2:GetDeclarativePoliciesReportSummary
• ec2:GetVerifiedAccessEndpointTargets
• ec2:ModifyVpcBlockPublicAccessExclusion
• ec2:ModifyVpcBlockPublicAccessOptions
• ec2:PurchaseCapacityBlockExtension
• ec2:ReplaceImageCriteriaInAllowedImagesSettings
• ec2:StartDeclarativePoliciesReport

Amazon Bedrock

• bedrock:AssociateAgentCollaborator
• bedrock:CreateBlueprint
• bedrock:CreateBlueprintVersion
• bedrock:CreateDataAutomationProject
• bedrock:CreateMarketplaceModelEndpoint
• bedrock:DeleteBlueprint
• bedrock:DeleteDataAutomationProject
• bedrock:DeleteKnowledgeBaseDocuments
• bedrock:DeleteMarketplaceModelAgreement
• bedrock:DeleteMarketplaceModelEndpoint
• bedrock:DeregisterMarketplaceModelEndpoint
• bedrock:DisassociateAgentCollaborator
• bedrock:GenerateQuery
• bedrock:GetAgentCollaborator
• bedrock:GetAsyncInvoke
• bedrock:GetBlueprint
• bedrock:GetBlueprintRecommendation
• bedrock:GetDataAutomationProject
• bedrock:GetDataAutomationStatus
• bedrock:GetKnowledgeBaseDocuments
• bedrock:GetMarketplaceModelEndpoint
• bedrock:GetPromptRouter
• bedrock:IngestKnowledgeBaseDocuments
• bedrock:InvokeBlueprintRecommendationAsync
• bedrock:InvokeDataAutomationAsync
• bedrock:ListAgentCollaborators
• bedrock:ListAsyncInvokes
• bedrock:ListBlueprints
• bedrock:ListDataAutomationProjects
• bedrock:ListKnowledgeBaseDocuments
• bedrock:ListMarketplaceModelEndpoints
• bedrock:ListPromptRouters
• bedrock:OptimizePrompt
• bedrock:RegisterMarketplaceModelEndpoint
• bedrock:Rerank
• bedrock:UpdateAgentCollaborator
• bedrock:UpdateBlueprint
• bedrock:UpdateDataAutomationProject
• bedrock:UpdateMarketplaceModelEndpoint

Amazon Chime

• chime:AssociateVoiceConnectorConnect
• chime:CreateConnectAnalyticsConnector
• chime:CreateConnectCallTransferConnector
• chime:DeleteVoiceConnectorExternalSystemsConfiguration
• chime:DisassociateVoiceConnectorConnect
• chime:GetVoiceConnectorExternalSystemsConfiguration
• chime:PutVoiceConnectorExternalSystemsConfiguration

Amazon CloudWatch Logs

• logs:DeleteIntegration
• logs:GetIntegration
• logs:ListIntegrations
• logs:PutIntegration

AWS Config

• config:AssociateResourceTypes
• config:DeleteServiceLinkedConfigurationRecorder
• config:DisassociateResourceTypes
• config:ListConfigurationRecorders
• config:PutServiceLinkedConfigurationRecorder

Amazon Connect

• connect:SendIntegrationEvent
• connect:StartEmailContact

Amazon Connect Outbound Campaigns

• connect-campaigns:PutProfileOutboundRequestBatch

Amazon EC2 Image Builder

• imagebuilder:GetMarketplaceResource

AWS Glue

• glue:GetJobUpgradeAnalysis
• glue:ListJobUpgradeAnalyses
• glue:StartJobUpgradeAnalysis
• glue:StopJobUpgradeAnalysis
• glue:UpgradeJob

AWS Invoicing Service

• invoicing:BatchGetInvoiceProfile
• invoicing:CreateInvoiceUnit
• invoicing:DeleteInvoiceUnit
• invoicing:GetInvoiceUnit
• invoicing:ListInvoiceUnits
• invoicing:ListTagsForResource
• invoicing:TagResource
• invoicing:UntagResource
• invoicing:UpdateInvoiceUnit

Amazon MemoryDB

• memorydb:CreateMultiRegionCluster
• memorydb:DeleteMultiRegionCluster
• memorydb:DescribeMultiRegionClusters
• memorydb:DescribeMultiRegionParameterGroups
• memorydb:DescribeMultiRegionParameters
• memorydb:ListAllowedMultiRegionClusterUpdates
• memorydb:UpdateMultiRegionCluster

Amazon OpenSearch

• opensearch:CancelDirectQuery
• opensearch:GetDirectQuery
• opensearch:GetDirectQueryResult
• opensearch:StartDirectQuery

Amazon OpenSearch Service

• es:AddDirectQueryDataSource
• es:DeleteDirectQueryDataSource
• es:GetDirectQueryDataSource
• es:ListDirectQueryDataSources
• es:UpdateDirectQueryDataSource

AWS Partner Central Selling

• partnercentral:CreateEngagement
• partnercentral:CreateEngagementInvitation
• partnercentral:CreateResourceSnapshot
• partnercentral:CreateResourceSnapshotJob
• partnercentral:DeleteResourceSnapshotJob
• partnercentral:GetEngagement
• partnercentral:GetResourceSnapshot
• partnercentral:GetResourceSnapshotJob
• partnercentral:GetSellingSystemSettings
• partnercentral:ListEngagementByAcceptingInvitationTasks
• partnercentral:ListEngagementFromOpportunityTasks
• partnercentral:ListEngagementMembers
• partnercentral:ListEngagementResourceAssociations
• partnercentral:ListEngagements
• partnercentral:ListResourceSnapshotJobs
• partnercentral:ListResourceSnapshots
• partnercentral:PutSellingSystemSettings
• partnercentral:StartResourceSnapshotJob
• partnercentral:StopResourceSnapshotJob

Amazon Q Business

• qbusiness:AssociatePermission
• qbusiness:CreateDataAccessor
• qbusiness:CreateIntegration
• qbusiness:DeleteDataAccessor
• qbusiness:DeleteIntegration
• qbusiness:DisassociatePermission
• qbusiness:GetDataAccessor
• qbusiness:GetIntegration
• qbusiness:GetMedia
• qbusiness:GetPolicy
• qbusiness:ListDataAccessors
• qbusiness:ListIntegrations
• qbusiness:ListPluginActions
• qbusiness:ListPluginTypeActions
• qbusiness:ListPluginTypeMetadata
• qbusiness:PutResourcePolicy
• qbusiness:SearchRelevantContent
• qbusiness:StartDeployment
• qbusiness:UpdateDataAccessor
• qbusiness:UpdateIntegration

Amazon QuickSight

• quicksight:DeleteDefaultQBusinessApplication
• quicksight:DescribeDefaultQBusinessApplication
• quicksight:DescribeQuickSightQSearchConfiguration
• quicksight:GenerateEmbedUrlForRegisteredUserWithIdentity
• quicksight:PredictQAResults
• quicksight:UpdateApplicationWithTokenExchangeGrant
• quicksight:UpdateDefaultQBusinessApplication
• quicksight:UpdateQuickSightQSearchConfiguration

Amazon Redshift

• redshift:DeregisterNamespace
• redshift:RegisterNamespace

Amazon Redshift Serverless

• redshift-serverless:ListManagedWorkgroups

Amazon S3

• s3:CreateBucketMetadataTableConfiguration
• s3:DeleteBucketMetadataTableConfiguration
• s3:GetBucketMetadataTableConfiguration

Amazon SageMaker

• sagemaker:CallPartnerAppApi
• sagemaker:CreateClusterSchedulerConfig
• sagemaker:CreateComputeQuota
• sagemaker:CreateReservedCapacity
• sagemaker:CreateTrainingPlan
• sagemaker:DeleteClusterSchedulerConfig
• sagemaker:DeleteComputeQuota
• sagemaker:DescribeClusterSchedulerConfig
• sagemaker:DescribeComputeQuota
• sagemaker:DescribeTrainingPlan
• sagemaker:ListClusterSchedulerConfigs
• sagemaker:ListComputeQuotas
• sagemaker:ListTrainingPlans
• sagemaker:SearchTrainingPlanOfferings
• sagemaker:UpdateClusterSchedulerConfig
• sagemaker:UpdateComputeQuota

AWS Transfer Family

• transfer:CreateWebApp
• transfer:DeleteWebApp
• transfer:DeleteWebAppCustomization
• transfer:DescribeWebApp
• transfer:DescribeWebAppCustomization
• transfer:ListWebApps
• transfer:UpdateWebApp
• transfer:UpdateWebAppCustomization

Amazon VPC Lattice

• vpc-lattice:AssociateViaAWSService-EventsAndStates
• vpc-lattice:CreateResourceConfiguration
• vpc-lattice:CreateResourceGateway
• vpc-lattice:CreateServiceNetworkResourceAssociation
• vpc-lattice:CreateServiceNetworkVpcEndpointAssociation
• vpc-lattice:DeleteResourceConfiguration
• vpc-lattice:DeleteResourceEndpointAssociation
• vpc-lattice:DeleteResourceGateway
• vpc-lattice:DeleteServiceNetworkResourceAssociation
• vpc-lattice:GetResourceConfiguration
• vpc-lattice:GetResourceGateway
• vpc-lattice:GetServiceNetworkResourceAssociation
• vpc-lattice:ListResourceConfigurations
• vpc-lattice:ListResourceEndpointAssociations
• vpc-lattice:ListResourceGateways
• vpc-lattice:ListServiceNetworkResourceAssociations
• vpc-lattice:ListServiceNetworkVpcEndpointAssociations
• vpc-lattice:UpdateResourceConfiguration
• vpc-lattice:UpdateResourceGateway

Amazon AI Operations

• aiops:CreateInvestigation
• aiops:CreateInvestigationEvent
• aiops:CreateInvestigationGroup
• aiops:CreateInvestigationResource
• aiops:DeleteInvestigation
• aiops:DeleteInvestigationGroup
• aiops:DeleteInvestigationGroupPolicy
• aiops:GetInvestigation
• aiops:GetInvestigationEvent
• aiops:GetInvestigationGroup
• aiops:GetInvestigationGroupPolicy
• aiops:GetInvestigationResource
• aiops:ListInvestigationEvents
• aiops:ListInvestigationGroups
• aiops:ListInvestigations
• aiops:ListTagsForResource
• aiops:PutInvestigationGroupPolicy
• aiops:TagResource
• aiops:UntagResource
• aiops:UpdateInvestigation
• aiops:UpdateInvestigationEvent
• aiops:UpdateInvestigationGroup

Amazon Aurora DSQL

• dsql:CreateCluster
• dsql:CreateMultiRegionClusters
• dsql:DbConnect
• dsql:DbConnectAdmin
• dsql:DeleteCluster
• dsql:DeleteMultiRegionClusters
• dsql:GetCluster
• dsql:ListClusters
• dsql:ListTagsForResource
• dsql:TagResource
• dsql:UntagResource
• dsql:UpdateCluster

Amazon CloudWatch Observability Admin Service

• observabilityadmin:GetTelemetryEvaluationStatus
• observabilityadmin:GetTelemetryEvaluationStatusForOrganization
• observabilityadmin:ListResourceTelemetry
• observabilityadmin:ListResourceTelemetryForOrganization
• observabilityadmin:StartTelemetryEvaluation
• observabilityadmin:StartTelemetryEvaluationForOrganization
• observabilityadmin:StopTelemetryEvaluation
• observabilityadmin:StopTelemetryEvaluationForOrganization

Network Flow Monitor

• networkflowmonitor:CreateMonitor
• networkflowmonitor:CreateScope
• networkflowmonitor:DeleteMonitor
• networkflowmonitor:DeleteScope
• networkflowmonitor:GetMonitor
• networkflowmonitor:GetQueryResultsMonitorTopContributors
• networkflowmonitor:GetQueryResultsWorkloadInsightsTopContributors
• networkflowmonitor:GetQueryResultsWorkloadInsightsTopContributorsData
• networkflowmonitor:GetQueryStatusMonitorTopContributors
• networkflowmonitor:GetQueryStatusWorkloadInsightsTopContributors
• networkflowmonitor:GetQueryStatusWorkloadInsightsTopContributorsData
• networkflowmonitor:GetScope
• networkflowmonitor:ListMonitors
• networkflowmonitor:ListScopes
• networkflowmonitor:ListTagsForResource
• networkflowmonitor:Publish
• networkflowmonitor:StartQueryMonitorTopContributors
• networkflowmonitor:StartQueryWorkloadInsightsTopContributors
• networkflowmonitor:StartQueryWorkloadInsightsTopContributorsData
• networkflowmonitor:StopQueryMonitorTopContributors
• networkflowmonitor:StopQueryWorkloadInsightsTopContributors
• networkflowmonitor:StopQueryWorkloadInsightsTopContributorsData
• networkflowmonitor:TagResource
• networkflowmonitor:UntagResource
• networkflowmonitor:UpdateMonitor
• networkflowmonitor:UpdateScope

AWS PrivateLink

• vpce:AllowMultiRegion

Amazon S3 Tables

• s3tables:CreateNamespace
• s3tables:CreateTable
• s3tables:CreateTableBucket
• s3tables:DeleteNamespace
• s3tables:DeleteTable
• s3tables:DeleteTableBucket
• s3tables:DeleteTableBucketPolicy
• s3tables:DeleteTablePolicy
• s3tables:GetNamespace
• s3tables:GetTable
• s3tables:GetTableBucket
• s3tables:GetTableBucketMaintenanceConfiguration
• s3tables:GetTableBucketPolicy
• s3tables:GetTableData
• s3tables:GetTableMaintenanceConfiguration
• s3tables:GetTableMaintenanceJobStatus
• s3tables:GetTableMetadataLocation
• s3tables:GetTablePolicy
• s3tables:ListNamespaces
• s3tables:ListTableBuckets
• s3tables:ListTables
• s3tables:PutTableBucketMaintenanceConfiguration
• s3tables:PutTableBucketPolicy
• s3tables:PutTableData
• s3tables:PutTableMaintenanceConfiguration
• s3tables:PutTablePolicy
• s3tables:RenameTable
• s3tables:UpdateTableMetadataLocation

Amazon SageMaker data science assistant

• sagemaker-data-science-assistant:SendConversation

AWS Security Incident Response

• security-ir:BatchGetMemberAccountDetails
• security-ir:CancelMembership
• security-ir:CloseCase
• security-ir:CreateCase
• security-ir:CreateCaseComment
• security-ir:CreateMembership
• security-ir:GetCase
• security-ir:GetCaseAttachmentDownloadUrl
• security-ir:GetCaseAttachmentUploadUrl
• security-ir:GetMembership
• security-ir:ListCaseEdits
• security-ir:ListCases
• security-ir:ListComments
• security-ir:ListMemberships
• security-ir:ListTagsForResource
• security-ir:TagResource
• security-ir:UntagResource
• security-ir:UpdateCase
• security-ir:UpdateCaseComment
• security-ir:UpdateCaseStatus
• security-ir:UpdateMembership
• security-ir:UpdateResolverType

AWS Network Manager

• networkmanager:CreateDirectConnectGatewayAttachment
• networkmanager:GetDirectConnectGatewayAttachment
• networkmanager:UpdateDirectConnectGatewayAttachment

Amazon Redshift Data API

• redshift-data:GetStagingBucketLocation

Amazon Redshift Serverless

• redshift-serverless:GetManagedWorkgroup

Amazon Connect Customer Profiles

• profile:CreateEventTrigger
• profile:DeleteEventTrigger
• profile:GetEventTrigger
• profile:ListEventTriggers
• profile:UpdateEventTrigger

Amazon Q

• q:ListDashboardMetrics

Amazon QuickSight

• quicksight:CreateBrand
• quicksight:DeleteBrand
• quicksight:DeleteBrandAssignment
• quicksight:DeleteUserCustomPermission
• quicksight:DescribeBrand
• quicksight:DescribeBrandAssignment
• quicksight:DescribeBrandPublishedVersion
• quicksight:DescribeDashboardsQAConfiguration
• quicksight:ListBrands
• quicksight:SearchTopics
• quicksight:UpdateBrand
• quicksight:UpdateBrandAssignment
• quicksight:UpdateBrandPublishedVersion
• quicksight:UpdateDashboardsQAConfiguration
• quicksight:UpdateUserCustomPermission

AWS Billing And Cost Management Pricing Calculator

• bcm-pricing-calculator:CreateBillEstimate
• bcm-pricing-calculator:CreateBillScenario
• bcm-pricing-calculator:CreateBillScenarioCommitmentModification
• bcm-pricing-calculator:CreateBillScenarioUsageModification
• bcm-pricing-calculator:CreateWorkloadEstimate
• bcm-pricing-calculator:CreateWorkloadEstimateUsage
• bcm-pricing-calculator:DeleteBillEstimate
• bcm-pricing-calculator:DeleteBillScenario
• bcm-pricing-calculator:DeleteBillScenarioCommitmentModification
• bcm-pricing-calculator:DeleteBillScenarioUsageModification
• bcm-pricing-calculator:DeleteWorkloadEstimate
• bcm-pricing-calculator:DeleteWorkloadEstimateUsage
• bcm-pricing-calculator:GetBillEstimate
• bcm-pricing-calculator:GetBillScenario
• bcm-pricing-calculator:GetPreferences
• bcm-pricing-calculator:GetWorkloadEstimate
• bcm-pricing-calculator:ListBillEstimateCommitments
• bcm-pricing-calculator:ListBillEstimateInputCommitmentModifications
• bcm-pricing-calculator:ListBillEstimateInputUsageModifications
• bcm-pricing-calculator:ListBillEstimateLineItems
• bcm-pricing-calculator:ListBillEstimates
• bcm-pricing-calculator:ListBillScenarioCommitmentModifications
• bcm-pricing-calculator:ListBillScenarioUsageModifications
• bcm-pricing-calculator:ListBillScenarios
• bcm-pricing-calculator:ListTagsForResource
• bcm-pricing-calculator:ListWorkloadEstimateUsage
• bcm-pricing-calculator:ListWorkloadEstimates
• bcm-pricing-calculator:TagResource
• bcm-pricing-calculator:UntagResource
• bcm-pricing-calculator:UpdateBillEstimate
• bcm-pricing-calculator:UpdateBillScenario
• bcm-pricing-calculator:UpdateBillScenarioCommitmentModification
• bcm-pricing-calculator:UpdateBillScenarioUsageModification
• bcm-pricing-calculator:UpdatePreferences
• bcm-pricing-calculator:UpdateWorkloadEstimate
• bcm-pricing-calculator:UpdateWorkloadEstimateUsage

AWS Application Auto Scaling

• application-autoscaling:GetPredictiveScalingForecast

AWS Artifact

• artifact:AcceptNdaForAgreement
• artifact:GetAgreement
• artifact:GetCustomerAgreement
• artifact:GetNdaForAgreement
• artifact:ListAgreements
• artifact:ListCustomerAgreements

AWS Chatbot

• chatbot:AssociateToConfiguration
• chatbot:CreateCustomAction
• chatbot:DeleteCustomAction
• chatbot:DisassociateFromConfiguration
• chatbot:GetCustomAction
• chatbot:ListAssociations
• chatbot:ListCustomActions
• chatbot:UpdateCustomAction

AWS Clean Rooms

• cleanrooms:PassCollaboration
• cleanrooms:PassMembership

AWS CloudTrail

• cloudtrail:CreateDashboard
• cloudtrail:DeleteDashboard
• cloudtrail:GetDashboard
• cloudtrail:ListDashboards
• cloudtrail:StartDashboardRefresh
• cloudtrail:UpdateDashboard

Amazon CloudWatch Logs

• logs:DeleteIndexPolicy
• logs:DeleteTransformer
• logs:DescribeFieldIndexes
• logs:DescribeIndexPolicies
• logs:GetTransformer
• logs:ListLogGroupsForQuery
• logs:PutIndexPolicy
• logs:PutTransformer
• logs:TestTransformer

AWS Cost Explorer Service

• ce:GetCommitmentPurchaseAnalysis
• ce:ListCommitmentPurchaseAnalyses
• ce:StartCommitmentPurchaseAnalysis

AWS IoT

• iot:CreateCommand
• iot:DeleteCommand
• iot:DeleteCommandExecution
• iot:GetCommand
• iot:GetCommandExecution
• iot:ListCommandExecutions
• iot:ListCommands
• iot:StartCommandExecution
• iot:UpdateCommand

AWS IoT FleetWise

• iotfleetwise:CreateStateTemplate
• iotfleetwise:DeleteStateTemplate
• iotfleetwise:GenerateCommandPayload
• iotfleetwise:GetStateTemplate
• iotfleetwise:ListStateTemplates
• iotfleetwise:UpdateStateTemplate

Amazon Q Business Q Apps

• qapps:CreatePresignedUrl
• qapps:DescribeQAppPermissions
• qapps:UpdateQAppPermissions

AWS Resilience Hub

• resiliencehub:DescribeMetricsExport
• resiliencehub:ListMetrics
• resiliencehub:StartMetricsExport

Amazon S3 Express

• s3express:GetLifecycleConfiguration
• s3express:PutLifecycleConfiguration

AWS Systems Manager

• ssm:ExecuteAPI
• ssm:GetExecutionPreview
• ssm:ListNodes
• ssm:ListNodesSummary
• ssm:StartExecutionPreview

AWS Systems Manager Quick Setup

• ssm-quicksetup:GetConfiguration
• ssm-quicksetup:ListConfigurations

Amazon Bedrock

• bedrock:InvokeInlineAgent

Amazon CloudFront

• cloudfront:AllowVendedLogDeliveryForResource
• cloudfront:CreateAnycastIpList
• cloudfront:CreateVpcOrigin
• cloudfront:DeleteAnycastIpList
• cloudfront:DeleteVpcOrigin
• cloudfront:GetAnycastIpList
• cloudfront:GetVpcOrigin
• cloudfront:ListAnycastIpLists
• cloudfront:ListDistributionsByAnycastIpListId
• cloudfront:ListDistributionsByVpcOriginId
• cloudfront:ListVpcOrigins
• cloudfront:UpdateVpcOrigin

AWS Compute Optimizer

• compute-optimizer:ExportIdleRecommendations
• compute-optimizer:GetIdleRecommendations

Amazon Connect

• connect:CreateContactFlowVersion
• connect:ListContactFlowVersions

AWS Elastic Load Balancing V2

• elasticloadbalancing:DescribeCapacityReservation
• elasticloadbalancing:ModifyCapacityReservation

AWS X-Ray

• xray:CancelTraceRetrieval
• xray:GetIndexingRules
• xray:GetRetrievedTracesGraph
• xray:GetTraceSegmentDestination
• xray:ListRetrievedTraces
• xray:PutSpans
• xray:PutSpansForIndexing
• xray:StartTraceRetrieval
• xray:UpdateIndexingRule
• xray:UpdateTraceSegmentDestination

Amazon DataZone

• datazone:CreateConnection
• datazone:DeleteConnection
• datazone:GetConnection
• datazone:GetDomainExecutionRoleCredentials
• datazone:GetJobRun
• datazone:GetLineageEvent
• datazone:ListConnections
• datazone:ListJobRuns
• datazone:ListLineageEvents
• datazone:UpdateConnection

AWS Glue

• glue:GetDashboardUrl
• glue:GetEntityRecords
• glue:GetGeneratedCode

AWS Marketplace

• aws-marketplace:ListAgreementCharges
• aws-marketplace:UpdatePurchaseOrders

Amazon SageMaker

• sagemaker:CreatePartnerApp
• sagemaker:CreatePartnerAppPresignedUrl
• sagemaker:DeletePartnerApp
• sagemaker:DescribePartnerApp
• sagemaker:ListPartnerApps
• sagemaker:UpdatePartnerApp

Amazon DataZone

• datazone:CreateRule
• datazone:DeleteRule
• datazone:GetRule
• datazone:ListRules
• datazone:SearchRules
• datazone:UpdateRule

AWS Glue

• glue:AuthorizeInboundIntegration
• glue:CreateCatalog
• glue:CreateColumnStatisticsTaskSettings
• glue:CreateInboundIntegration
• glue:CreateIntegration
• glue:CreateIntegrationResourceProperty
• glue:CreateIntegrationTableProperties
• glue:DeleteCatalog
• glue:DeleteColumnStatisticsTaskSettings
• glue:DeleteIntegration
• glue:DeleteIntegrationTableProperties
• glue:DescribeInboundIntegrations
• glue:DescribeIntegrations
• glue:GetCatalog
• glue:GetCatalogs
• glue:GetColumnStatisticsTaskSettings
• glue:GetIntegrationResourceProperty
• glue:GetIntegrationTableProperties
• glue:ModifyIntegration
• glue:StartColumnStatisticsTaskRunSchedule
• glue:StopColumnStatisticsTaskRunSchedule
• glue:UpdateCatalog
• glue:UpdateColumnStatisticsTaskSettings
• glue:UpdateIntegrationResourceProperty
• glue:UpdateIntegrationTableProperties

AWS HealthOmics

• omics:CreateRunCache
• omics:DeleteRunCache
• omics:DeleteS3AccessPolicy
• omics:GetRunCache
• omics:GetS3AccessPolicy
• omics:ListRunCaches
• omics:PutS3AccessPolicy
• omics:UpdateRunCache
• omics:UpdateSequenceStore

AWS SQL Workbench

• sqlworkbench:DeleteSqlGenerationContext
• sqlworkbench:GetSqlGenerationContext
• sqlworkbench:GetSqlRecommendations
• sqlworkbench:PassAccountSettings
• sqlworkbench:PutSqlGenerationContext

Amazon DynamoDB

• dynamodb:GetAbacStatus
• dynamodb:UpdateAbacStatus

AWS IoT SiteWise

• iotsitewise:CreateDataset
• iotsitewise:DeleteDataset
• iotsitewise:DescribeDataset
• iotsitewise:InvokeAssistant
• iotsitewise:ListDatasets
• iotsitewise:UpdateDataset

Amazon Connect Outbound Campaigns

• connect-campaigns:CreateCampaign
• connect-campaigns:DeleteCampaign
• connect-campaigns:DeleteCampaignChannelSubtypeConfig
• connect-campaigns:DeleteCampaignCommunicationLimits
• connect-campaigns:DeleteCampaignCommunicationTime
• connect-campaigns:DeleteConnectInstanceConfig
• connect-campaigns:DeleteConnectInstanceIntegration
• connect-campaigns:DeleteInstanceOnboardingJob
• connect-campaigns:DescribeCampaign
• connect-campaigns:GetCampaignState
• connect-campaigns:GetCampaignStateBatch
• connect-campaigns:GetConnectInstanceConfig
• connect-campaigns:GetInstanceOnboardingJobStatus
• connect-campaigns:ListCampaigns
• connect-campaigns:ListConnectInstanceIntegrations
• connect-campaigns:ListTagsForResource
• connect-campaigns:PauseCampaign
• connect-campaigns:PutConnectInstanceIntegration
• connect-campaigns:PutDialRequestBatch
• connect-campaigns:PutOutboundRequestBatch
• connect-campaigns:ResumeCampaign
• connect-campaigns:StartCampaign
• connect-campaigns:StartInstanceOnboardingJob
• connect-campaigns:StopCampaign
• connect-campaigns:TagResource
• connect-campaigns:UntagResource
• connect-campaigns:UpdateCampaignChannelSubtypeConfig
• connect-campaigns:UpdateCampaignCommunicationLimits
• connect-campaigns:UpdateCampaignCommunicationTime
• connect-campaigns:UpdateCampaignDialerConfig
• connect-campaigns:UpdateCampaignFlowAssociation
• connect-campaigns:UpdateCampaignName
• connect-campaigns:UpdateCampaignOutboundCallConfig
• connect-campaigns:UpdateCampaignSchedule
• connect-campaigns:UpdateCampaignSource

AWS End User Messaging SMS and Voice V2

• sms-voice:AssociateOriginationIdentity
• sms-voice:AssociateProtectConfiguration
• sms-voice:CreateConfigurationSet
• sms-voice:CreateEventDestination
• sms-voice:CreateOptOutList
• sms-voice:CreatePool
• sms-voice:CreateProtectConfiguration
• sms-voice:CreateRegistration
• sms-voice:CreateRegistrationAssociation
• sms-voice:CreateRegistrationAttachment
• sms-voice:CreateRegistrationVersion
• sms-voice:CreateVerifiedDestinationNumber
• sms-voice:DeleteAccountDefaultProtectConfiguration
• sms-voice:DeleteConfigurationSet
• sms-voice:DeleteDefaultMessageType
• sms-voice:DeleteDefaultSenderId
• sms-voice:DeleteEventDestination
• sms-voice:DeleteKeyword
• sms-voice:DeleteMediaMessageSpendLimitOverride
• sms-voice:DeleteOptOutList
• sms-voice:DeleteOptedOutNumber
• sms-voice:DeletePool
• sms-voice:DeleteProtectConfiguration
• sms-voice:DeleteProtectConfigurationRuleSetNumberOverride
• sms-voice:DeleteRegistration
• sms-voice:DeleteRegistrationAttachment
• sms-voice:DeleteRegistrationFieldValue
• sms-voice:DeleteResourcePolicy
• sms-voice:DeleteTextMessageSpendLimitOverride
• sms-voice:DeleteVerifiedDestinationNumber
• sms-voice:DeleteVoiceMessageSpendLimitOverride
• sms-voice:DescribeAccountAttributes
• sms-voice:DescribeAccountLimits
• sms-voice:DescribeConfigurationSets
• sms-voice:DescribeKeywords
• sms-voice:DescribeOptOutLists
• sms-voice:DescribeOptedOutNumbers
• sms-voice:DescribePhoneNumbers
• sms-voice:DescribePools
• sms-voice:DescribeProtectConfigurations
• sms-voice:DescribeRegistrationAttachments
• sms-voice:DescribeRegistrationFieldDefinitions
• sms-voice:DescribeRegistrationFieldValues
• sms-voice:DescribeRegistrationSectionDefinitions
• sms-voice:DescribeRegistrationTypeDefinitions
• sms-voice:DescribeRegistrationVersions
• sms-voice:DescribeRegistrations
• sms-voice:DescribeSenderIds
• sms-voice:DescribeSpendLimits
• sms-voice:DescribeVerifiedDestinationNumbers
• sms-voice:DisassociateOriginationIdentity
• sms-voice:DisassociateProtectConfiguration
• sms-voice:DiscardRegistrationVersion
• sms-voice:GetProtectConfigurationCountryRuleSet
• sms-voice:GetResourcePolicy
• sms-voice:ListPoolOriginationIdentities
• sms-voice:ListProtectConfigurationRuleSetNumberOverrides
• sms-voice:ListRegistrationAssociations
• sms-voice:ListTagsForResource
• sms-voice:PutKeyword
• sms-voice:PutMessageFeedback
• sms-voice:PutOptedOutNumber
• sms-voice:PutProtectConfigurationRuleSetNumberOverride
• sms-voice:PutRegistrationFieldValue
• sms-voice:PutResourcePolicy
• sms-voice:ReleasePhoneNumber
• sms-voice:ReleaseSenderId
• sms-voice:RequestPhoneNumber
• sms-voice:RequestSenderId
• sms-voice:SendDestinationNumberVerificationCode
• sms-voice:SendMediaMessage
• sms-voice:SendTextMessage
• sms-voice:SendVoiceMessage
• sms-voice:SetAccountDefaultProtectConfiguration
• sms-voice:SetDefaultMessageFeedbackEnabled
• sms-voice:SetDefaultMessageType
• sms-voice:SetDefaultSenderId
• sms-voice:SetMediaMessageSpendLimitOverride
• sms-voice:SetTextMessageSpendLimitOverride
• sms-voice:SetVoiceMessageSpendLimitOverride
• sms-voice:SubmitRegistrationVersion
• sms-voice:TagResource
• sms-voice:UntagResource
• sms-voice:UpdateEventDestination
• sms-voice:UpdatePhoneNumber
• sms-voice:UpdatePool
• sms-voice:UpdateProtectConfiguration
• sms-voice:UpdateProtectConfigurationCountryRuleSet
• sms-voice:UpdateSenderId
• sms-voice:VerifyDestinationNumber

AWS rePost Private

• repostspace:BatchAddRole
• repostspace:BatchRemoveRole
• repostspace:CreateSpace
• repostspace:DeleteSpace
• repostspace:DeregisterAdmin
• repostspace:GetSpace
• repostspace:ListSpaces
• repostspace:ListTagsForResource
• repostspace:RegisterAdmin
• repostspace:SendInvites
• repostspace:TagResource
• repostspace:UntagResource
• repostspace:UpdateSpace

AWS Clean Rooms ML

• cleanrooms-ml:CancelTrainedModel
• cleanrooms-ml:CancelTrainedModelInferenceJob
• cleanrooms-ml:CreateConfiguredModelAlgorithm
• cleanrooms-ml:CreateConfiguredModelAlgorithmAssociation
• cleanrooms-ml:CreateMLInputChannel
• cleanrooms-ml:CreateTrainedModel
• cleanrooms-ml:DeleteConfiguredModelAlgorithm
• cleanrooms-ml:DeleteConfiguredModelAlgorithmAssociation
• cleanrooms-ml:DeleteMLConfiguration
• cleanrooms-ml:DeleteMLInputChannelData
• cleanrooms-ml:DeleteTrainedModelOutput
• cleanrooms-ml:GetCollaborationConfiguredModelAlgorithmAssociation
• cleanrooms-ml:GetCollaborationMLInputChannel
• cleanrooms-ml:GetCollaborationTrainedModel
• cleanrooms-ml:GetConfiguredModelAlgorithm
• cleanrooms-ml:GetConfiguredModelAlgorithmAssociation
• cleanrooms-ml:GetMLConfiguration
• cleanrooms-ml:GetMLInputChannel
• cleanrooms-ml:GetTrainedModel
• cleanrooms-ml:GetTrainedModelInferenceJob
• cleanrooms-ml:ListCollaborationConfiguredModelAlgorithmAssociations
• cleanrooms-ml:ListCollaborationMLInputChannels
• cleanrooms-ml:ListCollaborationTrainedModelExportJobs
• cleanrooms-ml:ListCollaborationTrainedModelInferenceJobs
• cleanrooms-ml:ListCollaborationTrainedModels
• cleanrooms-ml:ListConfiguredModelAlgorithmAssociations
• cleanrooms-ml:ListConfiguredModelAlgorithms
• cleanrooms-ml:ListMLInputChannels
• cleanrooms-ml:ListTrainedModelInferenceJobs
• cleanrooms-ml:ListTrainedModels
• cleanrooms-ml:PutMLConfiguration
• cleanrooms-ml:StartTrainedModelExportJob
• cleanrooms-ml:StartTrainedModelInferenceJob

AWS DeepRacer

• deepracer:AdminDescribeAccountKey
• deepracer:AdminUpdateAccountKey

AWS IAM Access Analyzer

• access-analyzer:UpdateAnalyzer

AWS Identity and Access Management (IAM)

• iam:DisableOrganizationsRootCredentialsManagement
• iam:DisableOrganizationsRootSessions
• iam:EnableOrganizationsRootCredentialsManagement
• iam:EnableOrganizationsRootSessions
• iam:ListOrganizationsFeatures

AWS IoT

• iot:UpdateThingType

AWS License Manager User Subscriptions

• license-manager-user-subscriptions:CreateLicenseServerEndpoint
• license-manager-user-subscriptions:DeleteLicenseServerEndpoint
• license-manager-user-subscriptions:ListLicenseServerEndpoints
• license-manager-user-subscriptions:ListTagsForResource
• license-manager-user-subscriptions:TagResource
• license-manager-user-subscriptions:UntagResource

Amazon Q

• q:CreatePlugin
• q:DeletePlugin
• q:GetPlugin
• q:ListPluginProviders
• q:ListPlugins
• q:ListTagsForResource
• q:TagResource
• q:UntagResource
• q:UsePlugin

Amazon Q in Connect

• wisdom:CreateAIGuardrail
• wisdom:CreateAIGuardrailVersion
• wisdom:DeleteAIGuardrail
• wisdom:DeleteAIGuardrailVersion
• wisdom:GetAIGuardrail
• wisdom:GetNextMessage
• wisdom:ListAIGuardrailVersions
• wisdom:ListAIGuardrails
• wisdom:ListMessages
• wisdom:SendMessage
• wisdom:UpdateAIGuardrail

AWS Security Token Service

• sts:AssumeRoot

AWS Partner Central Selling

• partnercentral:AcceptEngagementInvitation
• partnercentral:AssignOpportunity
• partnercentral:AssociateOpportunity
• partnercentral:CreateOpportunity
• partnercentral:DisassociateOpportunity
• partnercentral:GetAwsOpportunitySummary
• partnercentral:GetEngagementInvitation
• partnercentral:GetOpportunity
• partnercentral:ListEngagementInvitations
• partnercentral:ListOpportunities
• partnercentral:ListSolutions
• partnercentral:RejectEngagementInvitation
• partnercentral:StartEngagementByAcceptingInvitationTask
• partnercentral:StartEngagementFromOpportunityTask
• partnercentral:SubmitOpportunity
• partnercentral:UpdateOpportunity

AWS B2B Data Interchange

• b2bi:GenerateMapping

AWS CloudTrail

• cloudtrail:GenerateQueryResultsSummary

AWS Control Tower

• controltower:ResetEnabledControl

Amazon GameLift

• gamelift:CreateContainerFleet
• gamelift:DeleteContainerFleet
• gamelift:DescribeContainerFleet
• gamelift:DescribeFleetDeployment
• gamelift:ListContainerFleets
• gamelift:ListContainerGroupDefinitionVersions
• gamelift:ListFleetDeployments
• gamelift:UpdateContainerFleet
• gamelift:UpdateContainerGroupDefinition

Amazon Application Recovery Controller - Zonal Shift

• arc-zonal-shift:CancelZonalShift
• arc-zonal-shift:CreatePracticeRunConfiguration
• arc-zonal-shift:DeletePracticeRunConfiguration
• arc-zonal-shift:GetAutoshiftObserverNotificationStatus
• arc-zonal-shift:GetManagedResource
• arc-zonal-shift:ListAutoshifts
• arc-zonal-shift:ListManagedResources
• arc-zonal-shift:ListZonalShifts
• arc-zonal-shift:StartZonalShift
• arc-zonal-shift:UpdateAutoshiftObserverNotificationStatus
• arc-zonal-shift:UpdatePracticeRunConfiguration
• arc-zonal-shift:UpdateZonalAutoshiftConfiguration
• arc-zonal-shift:UpdateZonalShift

Amazon OpenSearch Service

• es:AssociatePackages
• es:DissociatePackages
• es:UpdatePackageScope

AWS Outposts

• outposts:ListAssetInstances
• outposts:ListBlockingInstancesForCapacityTask

AWS Payments

• payments:AcceptFinancingApplicationTerms
• payments:CreateFinancingApplication
• payments:GetFinancingApplication
• payments:GetFinancingLine
• payments:GetFinancingLineWithdrawal
• payments:GetFinancingOption
• payments:ListFinancingApplications
• payments:ListFinancingLineWithdrawals
• payments:ListFinancingLines
• payments:ListPaymentProgramOptions
• payments:ListPaymentProgramStatus
• payments:UpdateFinancingApplication

Amazon DataZone

• datazone:BatchDeleteLinkedTypes
• datazone:BatchPutLinkedTypes
• datazone:ListLinkedTypes

Amazon Q Business

• qbusiness:ListAttachments

AWS Resource Explorer

• resource-explorer-2:CreateManagedView
• resource-explorer-2:GetManagedView
• resource-explorer-2:ListManagedViews

Amazon Bedrock

• bedrock:RenderPrompt
• bedrock:ValidateFlowDefinition

Amazon Connect

• connect:AssociateAnalyticsDataSet
• connect:DisassociateAnalyticsDataSet
• connect:ListAnalyticsDataAssociations
• connect:StartOutboundChatContact
• connect:StartScreenSharing

Amazon Elastic File System

• elasticfilesystem:ReplicationRead
• elasticfilesystem:ReplicationWrite

AWS Elemental MediaPackage V2

• mediapackagev2:CancelHarvestJob
• mediapackagev2:CreateHarvestJob
• mediapackagev2:GetHarvestJob
• mediapackagev2:HarvestObject
• mediapackagev2:ListHarvestJobs

Amazon SageMaker with MLflow

• sagemaker-mlflow:DeleteTraceTag
• sagemaker-mlflow:DeleteTraces
• sagemaker-mlflow:EndTrace
• sagemaker-mlflow:GetTraceInfo
• sagemaker-mlflow:SearchTraces
• sagemaker-mlflow:SetTraceTag
• sagemaker-mlflow:StartTrace

Amazon OpenSearch

• opensearch:ApplicationAccessAll

AWS AppSync

• appsync:CreateApi
• appsync:CreateChannelNamespace
• appsync:DeleteApi
• appsync:DeleteChannelNamespace
• appsync:EventConnect
• appsync:EventPublish
• appsync:EventSubscribe
• appsync:GetApi
• appsync:GetChannelNamespace
• appsync:ListApis
• appsync:ListChannelNamespaces
• appsync:UpdateApi
• appsync:UpdateChannelNamespace

Amazon CloudWatch

• cloudwatch:ListEntitiesForMetric

Amazon CloudWatch Application Signals

• application-signals:ListObservedEntities

Amazon DocumentDB Elastic Clusters

• docdb-elastic:ApplyPendingMaintenanceAction
• docdb-elastic:GetPendingMaintenanceAction
• docdb-elastic:ListPendingMaintenanceActions

Amazon EC2

• ec2:AcceptCapacityReservationBillingOwnership
• ec2:AssociateCapacityReservationBillingOwner
• ec2:AssociateSecurityGroupVpc
• ec2:DescribeCapacityReservationBillingRequests
• ec2:DescribeInstanceImageMetadata
• ec2:DescribeSecurityGroupVpcAssociations
• ec2:DisassociateCapacityReservationBillingOwner
• ec2:DisassociateSecurityGroupVpc
• ec2:ModifyInstanceCpuOptions
• ec2:RejectCapacityReservationBillingOwnership

Amazon Managed Service for Prometheus

• aps:UpdateScraper

Amazon Q Business Q Apps

• qapps:BatchCreateCategory
• qapps:BatchDeleteCategory
• qapps:BatchUpdateCategory
• qapps:ListCategories

AWS Tax Settings

• tax:DeleteSupplementalTaxRegistration
• tax:ListSupplementalTaxRegistrations
• tax:PutSupplementalTaxRegistration

Amazon WorkSpaces Thin Client

• thinclient:GetDeviceDetails

Amazon Location Service Maps

• geo-maps:GetStaticMap
• geo-maps:GetTile

Amazon Location Service Places

• geo-places:Autocomplete
• geo-places:Geocode
• geo-places:GetPlace
• geo-places:ReverseGeocode
• geo-places:SearchNearby
• geo-places:SearchText
• geo-places:Suggest

Amazon Location Service Routes

• geo-routes:CalculateIsolines
• geo-routes:CalculateRouteMatrix
• geo-routes:CalculateRoutes
• geo-routes:OptimizeWaypoints
• geo-routes:SnapToRoads

Amazon SageMaker

• sagemaker:BatchDeleteClusterNodes

Amazon Bedrock

• bedrock:CreateInferenceProfile
• bedrock:DeleteInferenceProfile

Amazon OpenSearch Service

• es:CreateApplication
• es:DeleteApplication
• es:GetApplication
• es:ListApplications
• es:UpdateApplication

AWS Payment Cryptography

• payment-cryptography:GenerateMacEmvPinChange

Amazon WorkMail

• workmail:CreateIdentityCenterApplication
• workmail:DeleteIdentityCenterApplication
• workmail:DeleteIdentityProviderConfiguration
• workmail:DeletePersonalAccessToken
• workmail:DescribeIdentityProviderConfiguration
• workmail:GetPersonalAccessTokenMetadata
• workmail:ListPersonalAccessTokens
• workmail:PutIdentityProviderConfiguration

Amazon CloudWatch Logs

• logs:ListEntitiesForLogGroup
• logs:ListLogGroupsForEntity

Amazon Elastic Container Service

• ecs:DescribeServiceDeployments
• ecs:DescribeServiceRevisions
• ecs:ListServiceDeployments

AWS Transfer Family

• transfer:ListFileTransferResults

Amazon Managed Workflows for Apache Airflow

• airflow:InvokeRestApi

Amazon Q in Connect

• wisdom:AllowVendedLogDeliveryForResource

AWS Mainframe Modernization Application Testing

• apptest:CreateTestCase
• apptest:CreateTestConfiguration
• apptest:CreateTestSuite
• apptest:DeleteTestCase
• apptest:DeleteTestConfiguration
• apptest:DeleteTestRun
• apptest:DeleteTestSuite
• apptest:GetTestCase
• apptest:GetTestConfiguration
• apptest:GetTestRunStep
• apptest:GetTestSuite
• apptest:ListTagsForResource
• apptest:ListTestCases
• apptest:ListTestConfigurations
• apptest:ListTestRunSteps
• apptest:ListTestRunTestCases
• apptest:ListTestRuns
• apptest:ListTestSuites
• apptest:StartTestRun
• apptest:TagResource
• apptest:UntagResource
• apptest:UpdateTestCase
• apptest:UpdateTestConfiguration
• apptest:UpdateTestSuite

AWS Data Exchange

• dataexchange:AcceptDataGrant
• dataexchange:CreateDataGrant
• dataexchange:DeleteDataGrant
• dataexchange:GetDataGrant
• dataexchange:GetReceivedDataGrant
• dataexchange:ListDataGrants
• dataexchange:ListReceivedDataGrants
• dataexchange:PublishToDataGrant

Amazon Q Business

• qbusiness:AllowVendedLogDeliveryForResource

Amazon WorkSpaces Secure Browser

• workspaces-web:ExpireSession
• workspaces-web:GetSession
• workspaces-web:ListSessions

Amazon Q

• q:GenerateCodeFromCommands

Amazon Redshift

• redshift:AuthorizeInboundIntegration
• redshift:CreateInboundIntegration
• redshift:CreateIntegration
• redshift:DeleteIntegration
• redshift:DescribeIntegrations
• redshift:ModifyIntegration

Amazon QuickSight

• quicksight:StartDashboardSnapshotJobSchedule

AWS Elemental MediaConnect

• mediaconnect:DescribeFlowSourceThumbnail

Amazon Q Business

• qbusiness:DisableAclOnDataSource

AWS End User Messaging Social

• social-messaging:AssociateWhatsAppBusinessAccount
• social-messaging:DeleteWhatsAppMessageMedia
• social-messaging:DisassociateWhatsAppBusinessAccount
• social-messaging:GetLinkedWhatsAppBusinessAccount
• social-messaging:GetLinkedWhatsAppBusinessAccountPhoneNumber
• social-messaging:GetWhatsAppMessageMedia
• social-messaging:ListLinkedWhatsAppBusinessAccounts
• social-messaging:ListTagsForResource
• social-messaging:PostWhatsAppMessageMedia
• social-messaging:PutWhatsAppBusinessAccountEventDestinations
• social-messaging:SendWhatsAppMessage
• social-messaging:TagResource
• social-messaging:UntagResource

AWS Deadline Cloud

• deadline:GetJobTemplate
• deadline:ListJobParameterDefinitions

Amazon Q in Connect

• wisdom:CreateAIAgent
• wisdom:CreateAIAgentVersion
• wisdom:CreateAIPrompt
• wisdom:CreateAIPromptVersion
• wisdom:DeleteAIAgent
• wisdom:DeleteAIAgentVersion
• wisdom:DeleteAIPrompt
• wisdom:DeleteAIPromptVersion
• wisdom:GetAIAgent
• wisdom:GetAIPrompt
• wisdom:ListAIAgentVersions
• wisdom:ListAIAgents
• wisdom:ListAIPromptVersions
• wisdom:ListAIPrompts
• wisdom:RemoveAssistantAIAgent
• wisdom:UpdateAIAgent
• wisdom:UpdateAIPrompt
• wisdom:UpdateAssistantAIAgent
• wisdom:UpdateSessionData

AWS Marketplace Reporting

• aws-marketplace:GetBuyerDashboard

Amazon QuickSight

• quicksight:DescribeQPersonalizationConfiguration
• quicksight:UpdateQPersonalizationConfiguration

AWS Systems Manager GUI Connect

• ssm-guiconnect:ListConnections

AWS B2B Data Interchange

• b2bi:CreateStarterMappingTemplate
• b2bi:TestConversion

Amazon Bedrock

• bedrock:InvokeBuilder
• bedrock:StopIngestionJob

Amazon Route 53 Profiles

• route53profiles:AssociateProfile
• route53profiles:AssociateResourceToProfile
• route53profiles:CreateProfile
• route53profiles:DeleteProfile
• route53profiles:DisassociateProfile
• route53profiles:DisassociateResourceFromProfile
• route53profiles:GetProfile
• route53profiles:GetProfileAssociation
• route53profiles:GetProfilePolicy
• route53profiles:GetProfileResourceAssociation
• route53profiles:ListProfileAssociations
• route53profiles:ListProfileResourceAssociations
• route53profiles:ListProfiles
• route53profiles:ListTagsForResource
• route53profiles:PutProfilePolicy
• route53profiles:TagResource
• route53profiles:UntagResource
• route53profiles:UpdateProfileResourceAssociation

AWS Supply Chain

• scn:CreateDataIntegrationFlow
• scn:CreateDataLakeDataset
• scn:DeleteDataIntegrationFlow
• scn:DeleteDataLakeDataset
• scn:GetDataIntegrationFlow
• scn:GetDataLakeDataset
• scn:GetInstance
• scn:ListDataIntegrationFlows
• scn:ListDataLakeDatasets
• scn:UpdateDataIntegrationFlow
• scn:UpdateDataLakeDataset

AWS IAM Identity Center (successor to AWS Single Sign-On) directory

• sso-directory:GetGroupId
• sso-directory:GetUserId
• sso-directory:ListGroups
• sso-directory:ListUsers

Amazon Pinpoint SMS Voice V2

• sms-voice:DeleteResourcePolicy
• sms-voice:GetResourcePolicy
• sms-voice:PutResourcePolicy

Amazon Q Business Q Apps

• qapps:ExportQAppSessionData
• qapps:ListQAppSessionData

AWS Resource Groups

• resource-groups:CancelTagSyncTask
• resource-groups:GetTagSyncTask
• resource-groups:ListGroupingStatuses
• resource-groups:ListTagSyncTasks
• resource-groups:StartTagSyncTask

AWS Elemental MediaConvert

• mediaconvert:ListVersions

AWS Elemental MediaLive

• medialive:CreateChannelPlacementGroup
• medialive:CreateCluster
• medialive:CreateNetwork
• medialive:CreateNode
• medialive:CreateNodeRegistrationScript
• medialive:DeleteChannelPlacementGroup
• medialive:DeleteCluster
• medialive:DeleteNetwork
• medialive:DeleteNode
• medialive:DescribeChannelPlacementGroup
• medialive:DescribeCluster
• medialive:DescribeNetwork
• medialive:DescribeNode
• medialive:ListChannelPlacementGroups
• medialive:ListClusters
• medialive:ListNetworks
• medialive:ListNodes
• medialive:PollAnywhere
• medialive:SubmitAnywhereStateChange
• medialive:UpdateChannelPlacementGroup
• medialive:UpdateCluster
• medialive:UpdateNetwork
• medialive:UpdateNode
• medialive:UpdateNodeState

AWS Service Catalog

• servicecatalog:DeleteResourcePolicy
• servicecatalog:GetResourcePolicy
• servicecatalog:PutResourcePolicy

Amazon Connect

• connect:CreateHoursOfOperationOverride
• connect:DeleteHoursOfOperationOverride
• connect:DescribeHoursOfOperationOverride
• connect:GetEffectiveHoursOfOperations
• connect:ListHoursOfOperationOverrides
• connect:SearchHoursOfOperationOverrides
• connect:SendOutboundEmail
• connect:UpdateHoursOfOperationOverride

AWS Directory Service

• ds:DescribeDirectoryDataAccess
• ds:DisableDirectoryDataAccess
• ds:EnableDirectoryDataAccess

AWS Directory Service Data

• ds-data:AddGroupMember
• ds-data:CreateGroup
• ds-data:CreateUser
• ds-data:DeleteGroup
• ds-data:DeleteUser
• ds-data:DescribeGroup
• ds-data:DescribeUser
• ds-data:DisableUser
• ds-data:ListGroupMembers
• ds-data:ListGroups
• ds-data:ListGroupsForMember
• ds-data:ListUsers
• ds-data:RemoveGroupMember
• ds-data:SearchGroups
• ds-data:SearchUsers
• ds-data:UpdateGroup
• ds-data:UpdateUser

AWS IoT

• iot:AssociateSbomWithPackageVersion
• iot:DisassociateSbomFromPackageVersion
• iot:ListSbomValidationResults

Amazon S3 Express

• s3express:GetEncryptionConfiguration
• s3express:PutEncryptionConfiguration

AWS Lambda

• lambda:DeleteResourcePolicy
• lambda:GetPublicAccessBlockConfig
• lambda:GetResourcePolicy
• lambda:PutPublicAccessBlockConfig
• lambda:PutResourcePolicy

AWS Directory Service

• ds:AccessDSData

Amazon Personalize

• personalize:UpdateSolution

AWS SQL Workbench

• sqlworkbench:DeleteQCustomContext
• sqlworkbench:GetQCustomContext
• sqlworkbench:GetQSqlPromptQuotas
• sqlworkbench:PutQCustomContext

Amazon Connect Customer Profiles

• profile:BatchGetCalculatedAttributeForProfile
• profile:BatchGetProfile
• profile:CreateSegmentDefinition
• profile:CreateSegmentEstimate
• profile:CreateSegmentSnapshot
• profile:DeleteSegmentDefinition
• profile:GetSegmentDefinition
• profile:GetSegmentEstimate
• profile:GetSegmentMembership
• profile:GetSegmentSnapshot
• profile:ListObjectTypeAttributes
• profile:ListProfileAttributeValues
• profile:ListSegmentDefinitions

Amazon Interactive Video Service

• ivs:CreateIngestConfiguration
• ivs:DeleteIngestConfiguration
• ivs:GetIngestConfiguration
• ivs:ListIngestConfigurations
• ivs:UpdateIngestConfiguration

Amazon Q Business Q Apps

• qapps:UpdateLibraryItemMetadata

Amazon RDS

• rds:CopyCustomDBEngineVersion
• rds:DescribeDBSnapshotTenantDatabases

AWS Support Plans

• supportplans:ListSupportPlanModifiers

Amazon Q in Connect

• wisdom:ActivateMessageTemplate
• wisdom:CreateMessageTemplate
• wisdom:CreateMessageTemplateAttachment
• wisdom:CreateMessageTemplateVersion
• wisdom:DeactivateMessageTemplate
• wisdom:DeleteMessageTemplate
• wisdom:DeleteMessageTemplateAttachment
• wisdom:GetMessageTemplate
• wisdom:ListMessageTemplateVersions
• wisdom:ListMessageTemplates
• wisdom:RenderMessageTemplate
• wisdom:SearchMessageTemplates
• wisdom:UpdateMessageTemplate
• wisdom:UpdateMessageTemplateMetadata

AWS AppConfig

• appconfig:GetAccountSettings
• appconfig:UpdateAccountSettings

Amazon CloudWatch Logs

• logs:DescribeConfigurationTemplates
• logs:UpdateDeliveryConfiguration

Amazon EC2

• ec2:CreateCapacityReservationBySplitting
• ec2:MoveCapacityReservationInstances

AWS Elastic Load Balancing V2

• elasticloadbalancing:DescribeListenerAttributes
• elasticloadbalancing:ModifyListenerAttributes

Amazon S3

• s3:ListCallerAccessGrants

AWS Fault Injection Service

• fis:GetSafetyLever
• fis:UpdateSafetyLeverState

Amazon QuickSight

• quicksight:ListFoldersForResource

Amazon Bedrock

• bedrock:CreateModelImportJob
• bedrock:DeleteImportedModel
• bedrock:GetImportedModel
• bedrock:GetInferenceProfile
• bedrock:GetModelImportJob
• bedrock:ListImportedModels
• bedrock:ListInferenceProfiles
• bedrock:ListModelImportJobs

AWS Parallel Computing Service

• pcs:AllowVendedLogDeliveryForResource
• pcs:CreateCluster
• pcs:CreateComputeNodeGroup
• pcs:CreateQueue
• pcs:DeleteCluster
• pcs:DeleteComputeNodeGroup
• pcs:DeleteQueue
• pcs:GetCluster
• pcs:GetComputeNodeGroup
• pcs:GetQueue
• pcs:ListClusters
• pcs:ListComputeNodeGroups
• pcs:ListQueues
• pcs:ListTagsForResource
• pcs:RegisterComputeNodeGroupInstance
• pcs:TagResource
• pcs:UntagResource
• pcs:UpdateComputeNodeGroup
• pcs:UpdateQueue

AWS Wickr

• wickr:DeleteNetwork

Amazon Elastic Container Registry

• ecr:GetAccountSetting
• ecr:PutAccountSetting

Amazon AppStream 2.0

• appstream:CreateThemeForStack
• appstream:DeleteThemeForStack
• appstream:DescribeThemeForStack
• appstream:UpdateThemeForStack

AWS CodeConnections

• codeconnections:GetConnectionToken

AWS CodeStar Connections

• codestar-connections:GetConnectionToken

Amazon DataZone

• datazone:CreateProjectProfile
• datazone:DeleteProjectProfile
• datazone:GetProjectProfile
• datazone:ListProjectProfiles
• datazone:UpdateProjectProfile

AWS HealthLake

• healthlake:CancelFHIRExportJobWithDelete
• healthlake:DescribeFHIRExportJobWithGet
• healthlake:StartFHIRExportJobWithPost

AWS Lambda

• lambda:GetFunctionRecursionConfig
• lambda:PutFunctionRecursionConfig

AWS Glue

• glue:GetRecipeAction
• glue:SendRecipeAction

Amazon Kinesis Analytics V2

• kinesisanalytics:DescribeApplicationOperation
• kinesisanalytics:ListApplicationOperations

Amazon Route 53 Profiles enables sharing DNS settings with VPCs

• route53profiles:GetProfilePolicy
• route53profiles:PutProfilePolicy

Amazon Bedrock

• bedrock:DeleteResourcePolicy
• bedrock:GetResourcePolicy
• bedrock:PutResourcePolicy

Amazon EC2

• ec2:CreateIpamExternalResourceVerificationToken
• ec2:DeleteIpamExternalResourceVerificationToken
• ec2:DescribeIpamExternalResourceVerificationTokens

Amazon AppIntegrations

• app-integrations:UpdateDataIntegrationAssociation

AWS Glue

• glue:PutDataQualityStatisticAnnotation

Amazon Kinesis Video Streams

• kinesisvideo:JoinStorageSessionAsViewer

AWS Elemental Appliances and Software Activation Service

• elemental-activations:ConfirmAccount
• elemental-activations:DownloadKickstart
• elemental-activations:GenerateLicense
• elemental-activations:GetArtifactGroupSoftwareVersions
• elemental-activations:GetAsset
• elemental-activations:GetAssets
• elemental-activations:GetProductAdvisories
• elemental-activations:GetSoftwareVersions

Amazon Bedrock

• bedrock:BatchDeleteEvaluationJob

AWS CodePipeline

• codepipeline:ListRuleExecutions
• codepipeline:ListRuleTypes
• codepipeline:OverrideStageCondition

AWS Control Catalog

• controlcatalog:GetControl
• controlcatalog:ListControls

Amazon DataZone

• datazone:AddEntityOwner
• datazone:CreateDataProduct
• datazone:CreateDataProductRevision
• datazone:CreateDomainUnit
• datazone:DeleteDataProduct
• datazone:DeleteDomainUnit
• datazone:GetDataProduct
• datazone:GetDomainUnit
• datazone:ListDataProductRevisions
• datazone:ListDomainUnitsForParent
• datazone:ListEntityOwners
• datazone:RemoveEntityOwner
• datazone:UpdateDomainUnit

Amazon Bedrock

• bedrock:CreateModelCopyJob
• bedrock:GetModelCopyJob
• bedrock:ListModelCopyJobs

AWS Resilience Hub

• resiliencehub:AcceptResourceGroupingRecommendations
• resiliencehub:DescribeResourceGroupingRecommendationTask
• resiliencehub:ListResourceGroupingRecommendations
• resiliencehub:RejectResourceGroupingRecommendations
• resiliencehub:StartResourceGroupingRecommendationTask

Amazon Route 53 Application Recovery Controller - Zonal Shift

• arc-zonal-shift:GetAutoshiftObserverNotificationStatus
• arc-zonal-shift:UpdateAutoshiftObserverNotificationStatus

AWS Customer Verification Service

• customer-verification:CreateUploadUrls

AWS Elastic Load Balancing V2

• elasticloadbalancing:DeleteSharedTrustStoreAssociation
• elasticloadbalancing:GetResourcePolicy

AWS Clean Rooms

• cleanrooms:CreateConfiguredTableAssociationAnalysisRule
• cleanrooms:DeleteConfiguredTableAssociationAnalysisRule
• cleanrooms:GetConfiguredTableAssociationAnalysisRule
• cleanrooms:UpdateConfiguredTableAssociationAnalysisRule

Amazon Elastic Container Registry

• ecr:DescribeRepositoryCreationTemplates
• ecr:UpdateRepositoryCreationTemplate

AWS Clean Rooms

• cleanrooms:CreateIdMappingTable
• cleanrooms:CreateIdNamespaceAssociation
• cleanrooms:DeleteIdMappingTable
• cleanrooms:DeleteIdNamespaceAssociation
• cleanrooms:GetCollaborationIdNamespaceAssociation
• cleanrooms:GetIdMappingTable
• cleanrooms:GetIdNamespaceAssociation
• cleanrooms:ListCollaborationIdNamespaceAssociations
• cleanrooms:ListIdMappingTables
• cleanrooms:ListIdNamespaceAssociations
• cleanrooms:PopulateIdMappingTable
• cleanrooms:UpdateIdMappingTable
• cleanrooms:UpdateIdNamespaceAssociation

AWS Entity Resolution

• entityresolution:UseWorkflow

Amazon SageMaker

• sagemaker:DeleteOptimizationJob

Amazon WorkMail

• workmail:DeliverToMailbox

Amazon Connect

• connect:SearchAgentStatuses
• connect:SearchUserHierarchyGroups

Amazon QuickSight

• quicksight:BatchCreateTopicReviewedAnswer
• quicksight:BatchDeleteTopicReviewedAnswer
• quicksight:ListTopicReviewedAnswers

AWS Resource Explorer

• resource-explorer-2:DeleteResourcePolicy
• resource-explorer-2:GetResourcePolicy
• resource-explorer-2:PutResourcePolicy

Amazon Interactive Video Service

• ivs:DeletePublicKey
• ivs:GetPublicKey
• ivs:ImportPublicKey
• ivs:ListPublicKeys

Amazon Bedrock

• bedrock:CreateFlow
• bedrock:CreateFlowAlias
• bedrock:CreateFlowVersion
• bedrock:CreatePrompt
• bedrock:CreatePromptVersion
• bedrock:DeleteAgentMemory
• bedrock:DeleteFlow
• bedrock:DeleteFlowAlias
• bedrock:DeleteFlowVersion
• bedrock:DeletePrompt
• bedrock:GetAgentMemory
• bedrock:GetFlow
• bedrock:GetFlowAlias
• bedrock:GetFlowVersion
• bedrock:GetPrompt
• bedrock:InvokeFlow
• bedrock:ListFlowAliases
• bedrock:ListFlowVersions
• bedrock:ListFlows
• bedrock:ListPrompts
• bedrock:PrepareFlow
• bedrock:UpdateFlow
• bedrock:UpdateFlowAlias
• bedrock:UpdatePrompt

Amazon CloudFront

• cloudfront:UpdateDistributionWithStagingConfig

AWS HealthImaging

• medical-imaging:GetDICOMInstanceFrames
• medical-imaging:GetDICOMInstanceMetadata

AWS License Manager Linux Subscriptions Manager

• license-manager-linux-subscriptions:DeregisterSubscriptionProvider
• license-manager-linux-subscriptions:GetRegisteredSubscriptionProvider
• license-manager-linux-subscriptions:ListRegisteredSubscriptionProviders
• license-manager-linux-subscriptions:ListTagsForResource
• license-manager-linux-subscriptions:RegisterSubscriptionProvider
• license-manager-linux-subscriptions:TagResource
• license-manager-linux-subscriptions:UntagResource

Amazon SageMaker

• sagemaker:CreateOptimizationJob
• sagemaker:DeleteOptimization
• sagemaker:DescribeOptimizationJob
• sagemaker:ListOptimizationJobs
• sagemaker:StopOptimizationJob

AWS App Studio

• appstudio:GetAccountStatus
• appstudio:GetEnablementJobStatus
• appstudio:StartEnablementJob
• appstudio:StartRollbackEnablementJob
• appstudio:StartTeamDeployment

AWS Elemental MediaConvert

• mediaconvert:SearchJobs

Amazon Q Business Q Apps

• qapps:ListTagsForResource
• qapps:UntagResource

Amazon SageMaker

• sagemaker:CreateHubContentReference
• sagemaker:DeleteHubContentReference
• sagemaker:DeployHubModel

AWS Systems Manager Quick Setup

• ssm-quicksetup:CreateConfigurationManager
• ssm-quicksetup:DeleteConfigurationManager
• ssm-quicksetup:GetConfigurationManager
• ssm-quicksetup:GetServiceSettings
• ssm-quicksetup:ListConfigurationManagers
• ssm-quicksetup:ListQuickSetupTypes
• ssm-quicksetup:ListTagsForResource
• ssm-quicksetup:TagResource
• ssm-quicksetup:UntagResource
• ssm-quicksetup:UpdateConfigurationDefinition
• ssm-quicksetup:UpdateConfigurationManager
• ssm-quicksetup:UpdateServiceSettings

AWS CloudHSM

• cloudhsm:DeleteResourcePolicy
• cloudhsm:GetResourcePolicy
• cloudhsm:PutResourcePolicy

Amazon Connect Customer Profiles

• profile:CreateSnapshot
• profile:GetSnapshot

Amazon DataZone

• datazone:CreateAssetFilter
• datazone:DeleteAssetFilter
• datazone:GetAssetFilter
• datazone:GetLineageNode
• datazone:ListAssetFilters
• datazone:ListLineageNodeHistory
• datazone:PostLineageEvent
• datazone:UpdateAssetFilter

Amazon Q Business Q Apps

• qapps:AssociateLibraryItemReview
• qapps:DisassociateLibraryItemReview
• qapps:GetQAppSession
• qapps:GetQAppSessionMetadata
• qapps:ImportDocument
• qapps:PredictQApp
• qapps:TagResource
• qapps:UpdateQAppSession
• qapps:UpdateQAppSessionMetadata

Amazon WorkSpaces

• workspaces:CreateWorkspacesPool
• workspaces:DescribeWorkspacesPoolSessions
• workspaces:DescribeWorkspacesPools
• workspaces:ModifyStreamingProperties
• workspaces:StartWorkspacesPool
• workspaces:StopWorkspacesPool
• workspaces:TerminateWorkspacesPool
• workspaces:TerminateWorkspacesPoolSession
• workspaces:UpdateWorkspacesPool

AWS Control Tower

• controltower:ListLandingZoneOperations

Amazon EC2

• ec2:DescribeTrafficMirrorFilterRules

AWS Glue

• glue:CreateUsageProfile
• glue:DeleteUsageProfile
• glue:GetUsageProfile
• glue:ListUsageProfiles
• glue:UpdateUsageProfile

AWS Compute Optimizer

• compute-optimizer:ExportRDSDatabaseRecommendations
• compute-optimizer:GetRDSDatabaseRecommendationProjectedMetrics
• compute-optimizer:GetRDSDatabaseRecommendations

Amazon Connect

• connect:CreateAuthenticationProfile
• connect:DescribeAuthenticationProfile
• connect:ListAuthenticationProfiles
• connect:UpdateAuthenticationProfile

AWS CloudShell

• cloudshell:DescribeEnvironments

Amazon Bedrock

• bedrock:AllowVendedLogDeliveryForResource

Amazon Macie

• macie2:BatchUpdateAutomatedDiscoveryAccounts
• macie2:ListAutomatedDiscoveryAccounts

Amazon SageMaker

• sagemaker:CreateMlflowTrackingServer
• sagemaker:CreatePresignedMlflowTrackingServerUrl
• sagemaker:DeleteMlflowTrackingServer
• sagemaker:DescribeMlflowTrackingServer
• sagemaker:ListMlflowTrackingServers
• sagemaker:StartMlflowTrackingServer
• sagemaker:StopMlflowTrackingServer
• sagemaker:UpdateMlflowTrackingServer

Amazon SageMaker with MLflow

• sagemaker-mlflow:AccessUI
• sagemaker-mlflow:CreateExperiment
• sagemaker-mlflow:CreateModelVersion
• sagemaker-mlflow:CreateRegisteredModel
• sagemaker-mlflow:CreateRun
• sagemaker-mlflow:DeleteExperiment
• sagemaker-mlflow:DeleteModelVersion
• sagemaker-mlflow:DeleteModelVersionTag
• sagemaker-mlflow:DeleteRegisteredModel
• sagemaker-mlflow:DeleteRegisteredModelAlias
• sagemaker-mlflow:DeleteRegisteredModelTag
• sagemaker-mlflow:DeleteRun
• sagemaker-mlflow:DeleteTag
• sagemaker-mlflow:GetDownloadURIForModelVersionArtifacts
• sagemaker-mlflow:GetExperiment
• sagemaker-mlflow:GetExperimentByName
• sagemaker-mlflow:GetLatestModelVersions
• sagemaker-mlflow:GetMetricHistory
• sagemaker-mlflow:GetModelVersion
• sagemaker-mlflow:GetModelVersionByAlias
• sagemaker-mlflow:GetRegisteredModel
• sagemaker-mlflow:GetRun
• sagemaker-mlflow:ListArtifacts
• sagemaker-mlflow:LogBatch
• sagemaker-mlflow:LogInputs
• sagemaker-mlflow:LogMetric
• sagemaker-mlflow:LogModel
• sagemaker-mlflow:LogParam
• sagemaker-mlflow:RenameRegisteredModel
• sagemaker-mlflow:RestoreExperiment
• sagemaker-mlflow:RestoreRun
• sagemaker-mlflow:SearchExperiments
• sagemaker-mlflow:SearchModelVersions
• sagemaker-mlflow:SearchRegisteredModels
• sagemaker-mlflow:SearchRuns
• sagemaker-mlflow:SetExperimentTag
• sagemaker-mlflow:SetModelVersionTag
• sagemaker-mlflow:SetRegisteredModelAlias
• sagemaker-mlflow:SetRegisteredModelTag
• sagemaker-mlflow:SetTag
• sagemaker-mlflow:TransitionModelVersionStage
• sagemaker-mlflow:UpdateExperiment
• sagemaker-mlflow:UpdateModelVersion
• sagemaker-mlflow:UpdateRegisteredModel
• sagemaker-mlflow:UpdateRun

AWS Key Management Service

• kms:DeriveSharedSecret

Amazon DataZone

• datazone:AssociateEnvironmentRole
• datazone:CreateEnvironmentAction
• datazone:DeleteEnvironmentAction
• datazone:DisassociateEnvironmentRole
• datazone:GetEnvironmentAction
• datazone:ListEnvironmentActions
• datazone:UpdateEnvironmentAction

AWS Tax Settings

• tax:BatchDeleteTaxRegistration

Amazon Connect

• connect:SearchContactFlowModules
• connect:SearchContactFlows

AWS Mainframe Modernization Application Testing provides tools and resources for automated functional equivalence testing for your migration projects.

• apptest:CreateTestCase
• apptest:CreateTestConfiguration
• apptest:CreateTestSuite
• apptest:DeleteTestCase
• apptest:DeleteTestConfiguration
• apptest:DeleteTestRun
• apptest:DeleteTestSuite
• apptest:GetTestCase
• apptest:GetTestConfiguration
• apptest:GetTestRunStep
• apptest:GetTestSuite
• apptest:ListTagsForResource
• apptest:ListTestCases
• apptest:ListTestConfigurations
• apptest:ListTestRunSteps
• apptest:ListTestRunTestCases
• apptest:ListTestRuns
• apptest:ListTestSuites
• apptest:StartTestRun
• apptest:TagResource
• apptest:UntagResource
• apptest:UpdateTestCase
• apptest:UpdateTestConfiguration
• apptest:UpdateTestSuite

AWS CloudTrail

• cloudtrail:GenerateQuery

AWS Entity Resolution

• entityresolution:BatchDeleteUniqueId

Amazon S3

• s3:PauseReplication

Amazon GuardDuty

• guardduty:CreateMalwareProtectionPlan
• guardduty:DeleteMalwareProtectionPlan
• guardduty:GetMalwareProtectionPlan
• guardduty:ListMalwareProtectionPlans
• guardduty:UpdateMalwareProtectionPlan

AWS IAM Access Analyzer

• access-analyzer:CheckNoPublicAccess
• access-analyzer:GenerateFindingRecommendation
• access-analyzer:GetFindingRecommendation

AWS Private CA Connector for SCEP

• pca-connector-scep:CreateChallenge
• pca-connector-scep:CreateConnector
• pca-connector-scep:DeleteChallenge
• pca-connector-scep:DeleteConnector
• pca-connector-scep:GetChallengeMetadata
• pca-connector-scep:GetChallengePassword
• pca-connector-scep:GetConnector
• pca-connector-scep:ListChallengeMetadata
• pca-connector-scep:ListConnectors
• pca-connector-scep:ListTagsForResource
• pca-connector-scep:TagResource
• pca-connector-scep:UntagResource

AWS Account Management

• account:AcceptPrimaryEmailUpdate
• account:GetPrimaryEmail
• account:StartPrimaryEmailUpdate

Amazon Location

• geo:ForecastGeofenceEvents
• geo:VerifyDevicePosition

AWS Lake Formation

• lakeformation:GetDataLakePrincipal

AWS Launch Wizard

• launchwizard:GetWorkloadDeploymentPattern
• launchwizard:ListTagsForResource
• launchwizard:TagResource
• launchwizard:UntagResource

AWS Batch

• batch:GetJobQueueSnapshot

Amazon EMR Serverless

• emr-serverless:ListJobRunAttempts

Amazon CloudWatch Application Signals

• application-signals:BatchGetServiceLevelObjectiveBudgetReport
• application-signals:CreateServiceLevelObjective
• application-signals:DeleteServiceLevelObjective
• application-signals:GetService
• application-signals:GetServiceLevelObjective
• application-signals:ListServiceDependencies
• application-signals:ListServiceDependents
• application-signals:ListServiceLevelObjectives
• application-signals:ListServiceOperations
• application-signals:ListServices
• application-signals:ListTagsForResource
• application-signals:StartDiscovery
• application-signals:TagResource
• application-signals:UntagResource
• application-signals:UpdateServiceLevelObjective

Amazon WorkSpaces Secure Browser

• workspaces-web:AssociateBrowserSettings
• workspaces-web:AssociateIpAccessSettings
• workspaces-web:AssociateNetworkSettings
• workspaces-web:AssociateTrustStore
• workspaces-web:AssociateUserAccessLoggingSettings
• workspaces-web:AssociateUserSettings
• workspaces-web:CreateBrowserSettings
• workspaces-web:CreateIdentityProvider
• workspaces-web:CreateIpAccessSettings
• workspaces-web:CreateNetworkSettings
• workspaces-web:CreatePortal
• workspaces-web:CreateTrustStore
• workspaces-web:CreateUserAccessLoggingSettings
• workspaces-web:CreateUserSettings
• workspaces-web:DeleteBrowserSettings
• workspaces-web:DeleteIdentityProvider
• workspaces-web:DeleteIpAccessSettings
• workspaces-web:DeleteNetworkSettings
• workspaces-web:DeletePortal
• workspaces-web:DeleteTrustStore
• workspaces-web:DeleteUserAccessLoggingSettings
• workspaces-web:DeleteUserSettings
• workspaces-web:DisassociateBrowserSettings
• workspaces-web:DisassociateIpAccessSettings
• workspaces-web:DisassociateNetworkSettings
• workspaces-web:DisassociateTrustStore
• workspaces-web:DisassociateUserAccessLoggingSettings
• workspaces-web:DisassociateUserSettings
• workspaces-web:GetBrowserSettings
• workspaces-web:GetIdentityProvider
• workspaces-web:GetIpAccessSettings
• workspaces-web:GetNetworkSettings
• workspaces-web:GetPortal
• workspaces-web:GetPortalServiceProviderMetadata
• workspaces-web:GetTrustStore
• workspaces-web:GetTrustStoreCertificate
• workspaces-web:GetUserAccessLoggingSettings
• workspaces-web:GetUserSettings
• workspaces-web:ListBrowserSettings
• workspaces-web:ListIdentityProviders
• workspaces-web:ListIpAccessSettings
• workspaces-web:ListNetworkSettings
• workspaces-web:ListPortals
• workspaces-web:ListTagsForResource
• workspaces-web:ListTrustStoreCertificates
• workspaces-web:ListTrustStores
• workspaces-web:ListUserAccessLoggingSettings
• workspaces-web:ListUserSettings
• workspaces-web:TagResource
• workspaces-web:UntagResource
• workspaces-web:UpdateBrowserSettings
• workspaces-web:UpdateIdentityProvider
• workspaces-web:UpdateIpAccessSettings
• workspaces-web:UpdateNetworkSettings
• workspaces-web:UpdatePortal
• workspaces-web:UpdateTrustStore
• workspaces-web:UpdateUserAccessLoggingSettings
• workspaces-web:UpdateUserSettings

AWS Glue

• glue:BatchPutDataQualityStatisticAnnotation
• glue:DescribeConnectionType
• glue:DescribeEntity
• glue:GetDataQualityModel
• glue:GetDataQualityModelResult
• glue:ListConnectionTypes
• glue:ListDataQualityStatisticAnnotations
• glue:ListDataQualityStatistics
• glue:ListEntities
• glue:PutDataQualityProfileAnnotation
• glue:RefreshOAuth2Tokens

Amazon Simple Workflow Service

• swf:DeleteActivityType
• swf:DeleteWorkflowType

AWS Chatbot

• chatbot:ListTagsForResource
• chatbot:TagResource
• chatbot:UntagResource

Amazon EC2

• ec2:DisableImageDeregistrationProtection
• ec2:EnableImageDeregistrationProtection
• ec2:GetInstanceTpmEkPub

Amazon EMR Serverless

• emr-serverless:AccessLivyEndpoints

AWS Support Recommendations

• supportrecommendations:GetSupportTroubleshootingResponse
• supportrecommendations:StartSupportTroubleshooting

AWS Payments

• payments:ListPaymentInstruments
• payments:ListTagsForResource
• payments:TagResource
• payments:UntagResource
• payments:UpdatePaymentInstrument

Amazon Simple Email Service - Mail Manager

• ses:CreateAddonInstance
• ses:CreateAddonSubscription
• ses:CreateArchive
• ses:CreateIngressPoint
• ses:CreateRelay
• ses:CreateRuleSet
• ses:CreateTrafficPolicy
• ses:DeleteAddonInstance
• ses:DeleteAddonSubscription
• ses:DeleteArchive
• ses:DeleteIngressPoint
• ses:DeleteRelay
• ses:DeleteRuleSet
• ses:DeleteTrafficPolicy
• ses:GetAddonInstance
• ses:GetAddonSubscription
• ses:GetArchive
• ses:GetArchiveExport
• ses:GetArchiveMessage
• ses:GetArchiveMessageContent
• ses:GetArchiveSearch
• ses:GetArchiveSearchResults
• ses:GetIngressPoint
• ses:GetRelay
• ses:GetRuleSet
• ses:GetTrafficPolicy
• ses:ListAddonInstances
• ses:ListAddonSubscriptions
• ses:ListArchiveExports
• ses:ListArchiveSearches
• ses:ListArchives
• ses:ListIngressPoints
• ses:ListRelays
• ses:ListRuleSets
• ses:ListTagsForResource
• ses:ListTrafficPolicies
• ses:StartArchiveExport
• ses:StartArchiveSearch
• ses:StopArchiveExport
• ses:StopArchiveSearch
• ses:TagResource
• ses:UntagResource
• ses:UpdateArchive
• ses:UpdateIngressPoint
• ses:UpdateRelay
• ses:UpdateRuleSet
• ses:UpdateTrafficPolicy

AWS Control Tower

• controltower:ListControlOperations

AWS HealthImaging

• medical-imaging:GetDICOMInstance

Amazon QuickSight

• quicksight:DescribeKeyRegistration
• quicksight:UpdateKeyRegistration

AWS User Subscriptions

• user-subscriptions:CreateClaim
• user-subscriptions:DeleteClaim
• user-subscriptions:ListApplicationClaims
• user-subscriptions:ListClaims
• user-subscriptions:ListUserSubscriptions
• user-subscriptions:UpdateClaim

Amazon Managed Grafana

• grafana:CreateWorkspaceServiceAccount
• grafana:CreateWorkspaceServiceAccountToken
• grafana:DeleteWorkspaceServiceAccount
• grafana:DeleteWorkspaceServiceAccountToken
• grafana:ListWorkspaceServiceAccountTokens
• grafana:ListWorkspaceServiceAccounts

Amazon Q in Connect

• wisdom:CreateContentAssociation
• wisdom:DeleteContentAssociation
• wisdom:GetContentAssociation
• wisdom:ListContentAssociations

Amazon Connect

• connect:BatchGetAttachedFileMetadata
• connect:CompleteAttachedFileUpload
• connect:DeleteAttachedFile
• connect:GetAttachedFile
• connect:StartAttachedFileUpload

Amazon EventBridge

• events:UpdateEventBus

Amazon Connect Cases

• cases:DeleteRelatedItem

Amazon Q

• q:CreateAssignment
• q:DeleteAssignment

AWS Systems Manager for SAP

• ssm-sap:ListOperationEvents
• ssm-sap:StartApplication
• ssm-sap:StopApplication

AWS Mainframe Modernization Service

• m2:ListBatchJobRestartPoints

AWS Transfer Family

• transfer:StartDirectoryListing

Amazon VPC Lattice Services

• vpc-lattice-svcs:Connect

AWS Budget Service

• budgets:ListTagsForResource
• budgets:TagResource
• budgets:UntagResource

AWS Resilience Hub

• resiliencehub:ListAppAssessmentResourceDrifts

AWS Trusted Advisor

• trustedadvisor:BatchUpdateRecommendationResourceExclusion

Amazon Connect

• connect:AdminGetEmergencyAccessToken

Amazon Personalize

• personalize:CreateDataDeletionJob
• personalize:DescribeDataDeletionJob
• personalize:ListDataDeletionJobs

Amazon Pinpoint SMS Voice V2

• sms-voice:AssociateProtectConfiguration
• sms-voice:CreateProtectConfiguration
• sms-voice:DeleteAccountDefaultProtectConfiguration
• sms-voice:DeleteMediaMessageSpendLimitOverride
• sms-voice:DeleteProtectConfiguration
• sms-voice:DescribeProtectConfigurations
• sms-voice:DisassociateProtectConfiguration
• sms-voice:GetProtectConfigurationCountryRuleSet
• sms-voice:SendMediaMessage
• sms-voice:SetAccountDefaultProtectConfiguration
• sms-voice:SetMediaMessageSpendLimitOverride
• sms-voice:UpdateProtectConfiguration
• sms-voice:UpdateProtectConfigurationCountryRuleSet

Amazon Q Business

• qbusiness:CancelSubscription
• qbusiness:CreateSubscription
• qbusiness:ListSubscriptions
• qbusiness:UpdateSubscription

Amazon Timestream

• timestream:DescribeAccountSettings
• timestream:UpdateAccountSettings

Amazon Q Business Q Apps

• qapps:AssociateQAppWithUser
• qapps:CopyQApp
• qapps:CreateLibraryItem
• qapps:CreateLibraryItemReview
• qapps:CreateQApp
• qapps:CreateSubscriptionToken
• qapps:DeleteLibraryItem
• qapps:DeleteQApp
• qapps:DisassociateQAppFromUser
• qapps:GetLibraryItem
• qapps:GetQApp
• qapps:ImportDocumentToQApp
• qapps:ImportDocumentToQAppSession
• qapps:ListLibraryItems
• qapps:ListQApps
• qapps:PredictProblemStatementFromConversation
• qapps:PredictQAppFromProblemStatement
• qapps:StartQAppSession
• qapps:StopQAppSession
• qapps:UpdateLibraryItem
• qapps:UpdateQApp

AWS CodePipeline

• codepipeline:RollbackStage

AWS HealthLake

• healthlake:SearchEverything

AWS App Mesh Preview

• appmesh-preview:DeleteMeshPolicy
• appmesh-preview:GetMeshPolicy
• appmesh-preview:PutMeshPolicy

Amazon Connect Cases

• cases:DeleteField
• cases:DeleteLayout
• cases:DeleteTemplate

Amazon GameLift

• gamelift:CreateContainerGroupDefinition
• gamelift:DeleteContainerGroupDefinition
• gamelift:DescribeContainerGroupDefinition
• gamelift:ListContainerGroupDefinitions

Amazon QuickSight

• quicksight:UpdateSPICECapacityConfiguration

AWS Step Functions

• states:ValidateStateMachineDefinition

Amazon WorkDocs

• workdocs:DescribeInstanceExports
• workdocs:StartInstanceExport

AWS Signin

• signin:CreateTrustedIdentityPropagationApplicationForConsole
• signin:ListTrustedIdentityPropagationApplicationsForConsole

Amazon Bedrock

• bedrock:ApplyGuardrail
• bedrock:CreateEvaluationJob
• bedrock:GetEvaluationJob
• bedrock:ListEvaluationJobs
• bedrock:StopEvaluationJob

AWS Identity and Access Management Roles Anywhere

• rolesanywhere:DeleteAttributeMapping
• rolesanywhere:PutAttributeMapping

Amazon Route 53 Profiles enables sharing DNS settings with VPCs

• route53profiles:AssociateProfile
• route53profiles:AssociateResourceToProfile
• route53profiles:CreateProfile
• route53profiles:DeleteProfile
• route53profiles:DisassociateProfile
• route53profiles:DisassociateResourceFromProfile
• route53profiles:GetProfile
• route53profiles:GetProfileAssociation
• route53profiles:GetProfileResourceAssociation
• route53profiles:ListProfileAssociations
• route53profiles:ListProfileResourceAssociations
• route53profiles:ListProfiles
• route53profiles:ListTagsForResource
• route53profiles:TagResource
• route53profiles:UntagResource
• route53profiles:UpdateProfileResourceAssociation

AWS App Mesh

• appmesh:DeleteMeshPolicy
• appmesh:GetMeshPolicy
• appmesh:PutMeshPolicy

Amazon Q

• q:GetIdentityMetadata
• q:PassRequest
• q:UpdateTroubleshootingCommandResult

Amazon WorkSpaces

• workspaces:AcceptAccountLinkInvitation
• workspaces:CreateAccountLinkInvitation
• workspaces:DeleteAccountLinkInvitation
• workspaces:GetAccountLink
• workspaces:ListAccountLinks
• workspaces:RejectAccountLinkInvitation

Amazon CloudWatch Internet Monitor

• internetmonitor:GetInternetEvent
• internetmonitor:ListInternetEvents

Amazon EMR on EKS (EMR Containers)

• emr-containers:CreateSecurityConfiguration
• emr-containers:DescribeSecurityConfiguration
• emr-containers:ListSecurityConfigurations

AWS Outposts

• outposts:CancelCapacityTask
• outposts:GetCapacityTask
• outposts:GetOutpostSupportedInstanceTypes
• outposts:ListCapacityTasks
• outposts:StartCapacityTask

AWS Key Management Service

• kms:ListKeyRotations
• kms:RotateKeyOnDemand

AWS Well-Architected Tool

• wellarchitected:ConfigureIntegration
• wellarchitected:GetGlobalSettings
• wellarchitected:UpdateIntegration

AWS Glue

• glue:BatchGetStageFiles
• glue:GetEnvironment
• glue:GetExecutors
• glue:GetExecutorsThreads
• glue:GetLogParsingStatus
• glue:GetQueries
• glue:GetQuery
• glue:GetStage
• glue:GetStageAttempt
• glue:GetStageAttemptTaskList
• glue:GetStageAttemptTaskSummary
• glue:GetStageFiles
• glue:GetStages
• glue:GetStorage
• glue:GetStorageUnit
• glue:RequestLogParsing

AWS Elemental MediaLive

• medialive:CreateCloudWatchAlarmTemplate
• medialive:CreateCloudWatchAlarmTemplateGroup
• medialive:CreateEventBridgeRuleTemplate
• medialive:CreateEventBridgeRuleTemplateGroup
• medialive:CreateSignalMap
• medialive:DeleteCloudWatchAlarmTemplate
• medialive:DeleteCloudWatchAlarmTemplateGroup
• medialive:DeleteEventBridgeRuleTemplate
• medialive:DeleteEventBridgeRuleTemplateGroup
• medialive:DeleteSignalMap
• medialive:GetCloudWatchAlarmTemplate
• medialive:GetCloudWatchAlarmTemplateGroup
• medialive:GetEventBridgeRuleTemplate
• medialive:GetEventBridgeRuleTemplateGroup
• medialive:GetSignalMap
• medialive:ListCloudWatchAlarmTemplateGroups
• medialive:ListCloudWatchAlarmTemplates
• medialive:ListEventBridgeRuleTemplateGroups
• medialive:ListEventBridgeRuleTemplates
• medialive:ListSignalMaps
• medialive:StartDeleteMonitorDeployment
• medialive:StartMonitorDeployment
• medialive:StartUpdateSignalMap
• medialive:UpdateCloudWatchAlarmTemplate
• medialive:UpdateCloudWatchAlarmTemplateGroup
• medialive:UpdateEventBridgeRuleTemplate
• medialive:UpdateEventBridgeRuleTemplateGroup

Amazon Q in Connect

• wisdom:UpdateSession

AWS Supply Chain

• scn:SendDataIntegrationEvent

Amazon DataZone

• datazone:AddPolicyGrant
• datazone:ListPolicyGrants
• datazone:RemovePolicyGrant
• datazone:UpdateDataSourceRunActivities

AWS Control Catalog

• controlcatalog:ListCommonControls
• controlcatalog:ListDomains
• controlcatalog:ListObjectives

Amazon Neptune Analytics

• neptune-graph:StartImportTask

AWS Clean Rooms

• cleanrooms:BatchGetSchemaAnalysisRule

Amazon RDS

• rds:ModifyIntegration

Amazon DocumentDB Elastic Clusters

• docdb-elastic:CopyClusterSnapshot
• docdb-elastic:StartCluster
• docdb-elastic:StopCluster

AWS Entity Resolution

• entityresolution:AddPolicyStatement
• entityresolution:CreateIdNamespace
• entityresolution:DeleteIdNamespace
• entityresolution:DeletePolicyStatement
• entityresolution:GetIdNamespace
• entityresolution:GetPolicy
• entityresolution:ListIdNamespaces
• entityresolution:PutPolicy
• entityresolution:UpdateIdNamespace
• entityresolution:UseIdNamespace

AWS Marketplace Catalog

• aws-marketplace:DescribeAssessment
• aws-marketplace:ListAssessments

AWS CloudFormation

• cloudformation:ListStackSetAutoDeploymentTargets

Amazon DataZone

• datazone:DeleteTimeSeriesDataPoints
• datazone:GetTimeSeriesDataPoint
• datazone:ListTimeSeriesDataPoints
• datazone:PostTimeSeriesDataPoints

AWS IoT Wireless

• iotwireless:GetMetricConfiguration
• iotwireless:GetMetrics
• iotwireless:UpdateMetricConfiguration

AWS CodeConnections

• codeconnections:CreateConnection
• codeconnections:CreateHost
• codeconnections:CreateRepositoryLink
• codeconnections:CreateSyncConfiguration
• codeconnections:DeleteConnection
• codeconnections:DeleteHost
• codeconnections:DeleteRepositoryLink
• codeconnections:DeleteSyncConfiguration
• codeconnections:GetConnection
• codeconnections:GetHost
• codeconnections:GetIndividualAccessToken
• codeconnections:GetInstallationUrl
• codeconnections:GetRepositoryLink
• codeconnections:GetRepositorySyncStatus
• codeconnections:GetResourceSyncStatus
• codeconnections:GetSyncBlockerSummary
• codeconnections:GetSyncConfiguration
• codeconnections:ListConnections
• codeconnections:ListHosts
• codeconnections:ListInstallationTargets
• codeconnections:ListRepositoryLinks
• codeconnections:ListRepositorySyncDefinitions
• codeconnections:ListSyncConfigurations
• codeconnections:ListTagsForResource
• codeconnections:PassConnection
• codeconnections:PassRepository
• codeconnections:RegisterAppCode
• codeconnections:StartAppRegistrationHandshake
• codeconnections:StartOAuthHandshake
• codeconnections:TagResource
• codeconnections:UntagResource
• codeconnections:UpdateConnectionInstallation
• codeconnections:UpdateHost
• codeconnections:UpdateRepositoryLink
• codeconnections:UpdateSyncBlocker
• codeconnections:UpdateSyncConfiguration
• codeconnections:UseConnection

AWS Deadline Cloud

• deadline:AssociateMemberToFarm
• deadline:AssociateMemberToFleet
• deadline:AssociateMemberToJob
• deadline:AssociateMemberToQueue
• deadline:AssumeFleetRoleForRead
• deadline:AssumeFleetRoleForWorker
• deadline:AssumeQueueRoleForRead
• deadline:AssumeQueueRoleForUser
• deadline:AssumeQueueRoleForWorker
• deadline:BatchGetJobEntity
• deadline:CopyJobTemplate
• deadline:CreateBudget
• deadline:CreateFarm
• deadline:CreateFleet
• deadline:CreateJob
• deadline:CreateLicenseEndpoint
• deadline:CreateMonitor
• deadline:CreateQueue
• deadline:CreateQueueEnvironment
• deadline:CreateQueueFleetAssociation
• deadline:CreateStorageProfile
• deadline:CreateWorker
• deadline:DeleteBudget
• deadline:DeleteFarm
• deadline:DeleteFleet
• deadline:DeleteLicenseEndpoint
• deadline:DeleteMeteredProduct
• deadline:DeleteMonitor
• deadline:DeleteQueue
• deadline:DeleteQueueEnvironment
• deadline:DeleteQueueFleetAssociation
• deadline:DeleteStorageProfile
• deadline:DeleteWorker
• deadline:DisassociateMemberFromFarm
• deadline:DisassociateMemberFromFleet
• deadline:DisassociateMemberFromJob
• deadline:DisassociateMemberFromQueue
• deadline:GetApplicationVersion
• deadline:GetBudget
• deadline:GetFarm
• deadline:GetFleet
• deadline:GetJob
• deadline:GetLicenseEndpoint
• deadline:GetMonitor
• deadline:GetQueue
• deadline:GetQueueEnvironment
• deadline:GetQueueFleetAssociation
• deadline:GetSession
• deadline:GetSessionAction
• deadline:GetSessionsStatisticsAggregation
• deadline:GetStep
• deadline:GetStorageProfile
• deadline:GetStorageProfileForQueue
• deadline:GetTask
• deadline:GetWorker
• deadline:ListAvailableMeteredProducts
• deadline:ListBudgets
• deadline:ListFarmMembers
• deadline:ListFarms
• deadline:ListFleetMembers
• deadline:ListFleets
• deadline:ListJobMembers
• deadline:ListJobs
• deadline:ListLicenseEndpoints
• deadline:ListMeteredProducts
• deadline:ListMonitors
• deadline:ListQueueEnvironments
• deadline:ListQueueFleetAssociations
• deadline:ListQueueMembers
• deadline:ListQueues
• deadline:ListSessionActions
• deadline:ListSessions
• deadline:ListSessionsForWorker
• deadline:ListStepConsumers
• deadline:ListStepDependencies
• deadline:ListSteps
• deadline:ListStorageProfiles
• deadline:ListStorageProfilesForQueue
• deadline:ListTagsForResource
• deadline:ListTasks
• deadline:ListWorkers
• deadline:PutMeteredProduct
• deadline:SearchJobs
• deadline:SearchSteps
• deadline:SearchTasks
• deadline:SearchWorkers
• deadline:StartSessionsStatisticsAggregation
• deadline:TagResource
• deadline:UntagResource
• deadline:UpdateBudget
• deadline:UpdateFarm
• deadline:UpdateFleet
• deadline:UpdateJob
• deadline:UpdateMonitor
• deadline:UpdateQueue
• deadline:UpdateQueueEnvironment
• deadline:UpdateQueueFleetAssociation
• deadline:UpdateSession
• deadline:UpdateStep
• deadline:UpdateStorageProfile
• deadline:UpdateTask
• deadline:UpdateWorker
• deadline:UpdateWorkerSchedule

Amazon SageMaker

• sagemaker:DeleteResourcePolicy
• sagemaker:GetResourcePolicy
• sagemaker:PutResourcePolicy

Amazon GroundTruth Labeling

• groundtruthlabeling:CreateBatch
• groundtruthlabeling:CreateIntakeForm
• groundtruthlabeling:CreateProject
• groundtruthlabeling:CreateWorkflowDefinition
• groundtruthlabeling:GenerateLIDARPreviewTaskConfigJob
• groundtruthlabeling:GetBatch
• groundtruthlabeling:GetIntakeFormStatus
• groundtruthlabeling:ListBatches
• groundtruthlabeling:ListProjects
• groundtruthlabeling:RunGenerateManifestMetricsJob
• groundtruthlabeling:UpdateBatch

Amazon EC2

• ec2:DescribeMacHosts
• ec2:GetInstanceMetadataDefaults
• ec2:ModifyInstanceMetadataDefaults

Amazon FinSpace

• finspace:DeleteKxClusterNode

AWS Cost Explorer Service

• ce:ListCostAllocationTagBackfillHistory
• ce:StartCostAllocationTagBackfill

AWS Migration Hub Orchestrator

• migrationhub-orchestrator:CreateTemplate
• migrationhub-orchestrator:DeleteTemplate
• migrationhub-orchestrator:UpdateTemplate

AWS Savings Plans

• savingsplans:ReturnSavingsPlan

Amazon CloudWatch Internet Monitor

• internetmonitor:Link

AWS CodeArtifact

• codeartifact:CreatePackageGroup
• codeartifact:DeletePackageGroup
• codeartifact:DescribePackageGroup
• codeartifact:GetAssociatedPackageGroup
• codeartifact:ListAllowedRepositoriesForGroup
• codeartifact:ListAssociatedPackages
• codeartifact:ListPackageGroups
• codeartifact:ListSubPackageGroups
• codeartifact:UpdatePackageGroup
• codeartifact:UpdatePackageGroupOriginConfiguration

Amazon DynamoDB

• dynamodb:DeleteResourcePolicy
• dynamodb:PutResourcePolicy
• dynamodb:UpdateKinesisStreamingDestination

Amazon WorkMail

• workmail:AllowVendedLogDeliveryForResource

Amazon Managed Blockchain Query

• managedblockchain-query:ListFilteredTransactionEvents

Amazon Timestream InfluxDB

• timestream-influxdb:CreateDbInstance
• timestream-influxdb:CreateDbParameterGroup
• timestream-influxdb:DeleteDbInstance
• timestream-influxdb:GetDbInstance
• timestream-influxdb:GetDbParameterGroup
• timestream-influxdb:ListDbInstances
• timestream-influxdb:ListDbParameterGroups
• timestream-influxdb:ListTagsForResource
• timestream-influxdb:TagResource
• timestream-influxdb:UntagResource
• timestream-influxdb:UpdateDbInstance

Amazon Timestream Influxdb

• timestream-influxdb:CreateDbInstance
• timestream-influxdb:CreateDbParameterGroup
• timestream-influxdb:DeleteDbInstance
• timestream-influxdb:GetDbInstance
• timestream-influxdb:GetDbParameterGroup
• timestream-influxdb:ListDbInstances
• timestream-influxdb:ListDbParameterGroups
• timestream-influxdb:ListTagsForResource
• timestream-influxdb:TagResource
• timestream-influxdb:UntagResource
• timestream-influxdb:UpdateDbInstance

Amazon Lightsail

• lightsail:GetSetupHistory
• lightsail:SetupInstanceHttps

Amazon DataZone

• datazone:CancelMetadataGenerationRun

AWS Migration Hub Strategy Recommendations

• migrationhub-strategy:PutLogData
• migrationhub-strategy:PutMetricData

Amazon Lex V2

• lex:CreateBotReplica
• lex:DeleteBotReplica
• lex:DescribeBotReplica
• lex:ListBotAliasReplicas
• lex:ListBotReplicas
• lex:ListBotVersionReplicas

Amazon Elastic MapReduce

• elasticmapreduce:SetUnhealthyNodeReplacement

AWS Identity Sync

• identity-sync:AllowVendedLogDeliveryForResource

Amazon Q

• q:ListConversations

Amazon Redshift

• redshift:CreateQev2IdcApplication
• redshift:DeleteQev2IdcApplication
• redshift:DescribeQev2IdcApplications
• redshift:ModifyQev2IdcApplication

AWS Amplify UI Builder

• amplifyuibuilder:ListTagsForResource
• amplifyuibuilder:TagResource
• amplifyuibuilder:UntagResource

Amazon Managed Streaming for Kafka Connect

• kafkaconnect:DeleteWorkerConfiguration
• kafkaconnect:ListTagsForResource
• kafkaconnect:TagResource
• kafkaconnect:UntagResource

AWS WAF V2

• wafv2:DeleteAPIKey

AWS Elemental MediaLive

• medialive:RestartChannelPipelines

AWS Resource Groups

• resource-groups:DeleteGroupPolicy
• resource-groups:GetGroupPolicy
• resource-groups:ListResourceTypes

Amazon Message Gateway Service

• ssmmessages:CreateControlChannel
• ssmmessages:CreateDataChannel
• ssmmessages:OpenControlChannel
• ssmmessages:OpenDataChannel

Amazon Bedrock

• bedrock:DetectGeneratedContent

AWS Control Tower

• controltower:DisableBaseline
• controltower:EnableBaseline
• controltower:GetBaseline
• controltower:GetBaselineOperation
• controltower:GetEnabledBaseline
• controltower:ListBaselines
• controltower:ListEnabledBaselines
• controltower:ResetEnabledBaseline
• controltower:UpdateEnabledBaseline

Amazon SageMaker

• sagemaker:UpdateClusterSoftware

AWS CloudFormation

• cloudformation:CreateGeneratedTemplate
• cloudformation:DeleteGeneratedTemplate
• cloudformation:DescribeGeneratedTemplate
• cloudformation:DescribeResourceScan
• cloudformation:GetGeneratedTemplate
• cloudformation:ListGeneratedTemplates
• cloudformation:ListResourceScanRelatedResources
• cloudformation:ListResourceScanResources
• cloudformation:ListResourceScans
• cloudformation:StartResourceScan
• cloudformation:UpdateGeneratedTemplate

AWS Database Migration Service

• dms:CreateTest
• dms:CreateTestEnvironments
• dms:CreateTestPlan
• dms:CreateTestRun
• dms:DeleteTest
• dms:DeleteTestPlan
• dms:DescribeTestEnvironments
• dms:DescribeTestGenerationStatus
• dms:DescribeTestPlans
• dms:DescribeTestRunResultsSummaries
• dms:DescribeTestRuns
• dms:DescribeTests
• dms:ModifyTest
• dms:ModifyTestPlan
• dms:StartGenerateTests
• dms:StopGenerateTests
• dms:StopTestRun
• dms:ViewTestRunResults

Amazon Redshift

• redshift:ListRecommendations

AWS Tax Settings

• tax:GetTaxInfoReportingDocument

AWS Billing

• billing:GetBillingData
• billing:GetBillingDetails
• billing:GetBillingNotifications
• billing:GetBillingPreferences
• billing:GetContractInformation
• billing:GetCredits
• billing:GetIAMAccessPreference
• billing:GetSellerOfRecord
• billing:ListBillingViews
• billing:PutContractInformation
• billing:RedeemCredits
• billing:UpdateBillingPreferences
• billing:UpdateIAMAccessPreference

AWS Billing Console

• aws-portal:GetConsoleActionSetEnforced
• aws-portal:ModifyAccount
• aws-portal:ModifyBilling
• aws-portal:ModifyPaymentMethods
• aws-portal:UpdateConsoleActionSetEnforced
• aws-portal:ViewAccount
• aws-portal:ViewBilling
• aws-portal:ViewPaymentMethods
• aws-portal:ViewUsage

Tag Editor

• resource-explorer:ListResourceTypes
• resource-explorer:ListResources
• resource-explorer:ListTags

AWS AppSync

• appsync:GetGraphqlApiEnvironmentVariables
• appsync:PutGraphqlApiEnvironmentVariables

AWS Billing And Cost Management Data Exports

• bcm-data-exports:CreateExport
• bcm-data-exports:DeleteExport
• bcm-data-exports:GetExecution
• bcm-data-exports:GetExport
• bcm-data-exports:GetTable
• bcm-data-exports:ListExecutions
• bcm-data-exports:ListExports
• bcm-data-exports:ListTables
• bcm-data-exports:ListTagsForResource
• bcm-data-exports:TagResource
• bcm-data-exports:UntagResource
• bcm-data-exports:UpdateExport

Amazon SageMaker

• sagemaker:DeleteHyperParameterTuningJob

AWS Billing and Cost Management And Cost Management Data Exports

• bcm-data-exports:CreateExport
• bcm-data-exports:DeleteExport
• bcm-data-exports:GetExecution
• bcm-data-exports:GetExport
• bcm-data-exports:GetTable
• bcm-data-exports:ListExecutions
• bcm-data-exports:ListExports
• bcm-data-exports:ListTables
• bcm-data-exports:ListTagsForResource
• bcm-data-exports:TagResource
• bcm-data-exports:UntagResource
• bcm-data-exports:UpdateExport

Amazon DataZone

• datazone:ListEnvironmentBlueprintConfigurationSummaries

Amazon Interactive Video Service

• ivs:CreatePlaybackRestrictionPolicy
• ivs:DeletePlaybackRestrictionPolicy
• ivs:GetPlaybackRestrictionPolicy
• ivs:ListPlaybackRestrictionPolicies
• ivs:UpdatePlaybackRestrictionPolicy