Menu
AWS Identity and Access Management
User Guide

Service Actions Included in the Read Access Level

You can use the actions below to read content in AWS resources. If an AWS service does not appear on this page then that service does not have any actions in the Read category.

Amazon AWS Cloud Contact Center

These are the Read actions for Amazon AWS Cloud Contact Center.

  • connect:DescribeInstance

  • connect:GetFederationTokens

Amazon AppStream

These are the Read actions for Amazon AppStream.

  • appstream:DescribeFleets

  • appstream:DescribeImages

  • appstream:DescribeSessions

  • appstream:DescribeStacks

  • appstream:ListAssociatedFleets

  • appstream:ListAssociatedStacks

Application Auto Scaling

These are the Read actions for Application Auto Scaling.

  • application-autoscaling:DescribeScalableTargets

  • application-autoscaling:DescribeScalingActivities

  • application-autoscaling:DescribeScalingPolicies

Application Discovery

These are the Read actions for Application Discovery.

  • discovery:DescribeAgents

  • discovery:DescribeConfigurations

  • discovery:DescribeExportConfigurations

  • discovery:DescribeTags

  • discovery:GetDiscoverySummary

Amazon Athena

These are the Read actions for Amazon Athena.

  • athena:BatchGetNamedQuery

  • athena:BatchGetQueryExecution

  • athena:GetNamedQuery

  • athena:GetQueryExecution

  • athena:GetQueryResults

Auto Scaling

These are the Read actions for Auto Scaling.

  • autoscaling:DescribeTags

AWS Batch

These are the Read actions for AWS Batch.

  • batch:DescribeComputeEnvironments

  • batch:DescribeJobDefinitions

  • batch:DescribeJobQueues

  • batch:DescribeJobs

AWS Billing

These are the Read actions for AWS Billing.

  • aws-portal:ViewAccount

  • aws-portal:ViewBilling

  • aws-portal:ViewPaymentMethods

  • aws-portal:ViewUsage

AWS Budget Service

These are the Read actions for AWS Budget Service.

  • budgets:ViewBudget

AWS Certificate Manager

These are the Read actions for AWS Certificate Manager.

  • acm:DescribeCertificate

  • acm:GetCertificate

  • acm:ListTagsForCertificate

Amazon Cloud Directory

These are the Read actions for Amazon Cloud Directory.

  • clouddirectory:BatchRead

  • clouddirectory:GetDirectory

  • clouddirectory:GetFacet

  • clouddirectory:GetObjectInformation

  • clouddirectory:GetSchemaAsJson

  • clouddirectory:GetTypedLinkFacetInformation

  • clouddirectory:ListAttachedIndices

  • clouddirectory:ListFacetAttributes

  • clouddirectory:ListFacetNames

  • clouddirectory:ListIncomingTypedLinks

  • clouddirectory:ListIndex

  • clouddirectory:ListObjectAttributes

  • clouddirectory:ListObjectChildren

  • clouddirectory:ListObjectParentPaths

  • clouddirectory:ListObjectParents

  • clouddirectory:ListObjectPolicies

  • clouddirectory:ListOutgoingTypedLinks

  • clouddirectory:ListPolicyAttachments

  • clouddirectory:ListTagsForResource

  • clouddirectory:ListTypedLinkFacetAttributes

  • clouddirectory:ListTypedLinkFacetNames

  • clouddirectory:LookupPolicy

AWS CloudFormation

These are the Read actions for AWS CloudFormation.

  • cloudformation:DescribeAccountLimits

  • cloudformation:DescribeChangeSet

  • cloudformation:DescribeStackEvents

  • cloudformation:DescribeStackResource

  • cloudformation:DescribeStackResources

  • cloudformation:EstimateTemplateCost

  • cloudformation:GetStackPolicy

  • cloudformation:GetTemplate

  • cloudformation:GetTemplateSummary

  • cloudformation:PreviewStackUpdate

Amazon CloudFront

These are the Read actions for Amazon CloudFront.

  • cloudfront:GetCloudFrontOriginAccessIdentity

  • cloudfront:GetCloudFrontOriginAccessIdentityConfig

  • cloudfront:GetDistribution

  • cloudfront:GetDistributionConfig

  • cloudfront:GetInvalidation

  • cloudfront:GetStreamingDistribution

  • cloudfront:GetStreamingDistributionConfig

  • cloudfront:ListTagsForResource

AWS CloudHSM

These are the Read actions for AWS CloudHSM.

  • cloudhsm:DescribeHapg

  • cloudhsm:DescribeHsm

  • cloudhsm:DescribeLunaClient

  • cloudhsm:GetConfig

  • cloudhsm:ListTagsForResource

Amazon CloudSearch

These are the Read actions for Amazon CloudSearch.

  • cloudsearch:DescribeAnalysisSchemes

  • cloudsearch:DescribeAvailabilityOptions

  • cloudsearch:DescribeExpressions

  • cloudsearch:DescribeIndexFields

  • cloudsearch:DescribeScalingParameters

  • cloudsearch:DescribeServiceAccessPolicies

  • cloudsearch:DescribeSuggesters

  • cloudsearch:ListTags

  • cloudsearch:search

  • cloudsearch:suggest

AWS CloudTrail

These are the Read actions for AWS CloudTrail.

  • cloudtrail:GetEventSelectors

  • cloudtrail:GetTrailStatus

  • cloudtrail:ListPublicKeys

  • cloudtrail:ListTags

Amazon CloudWatch

These are the Read actions for Amazon CloudWatch.

  • cloudwatch:DescribeAlarmHistory

  • cloudwatch:DescribeAlarms

  • cloudwatch:DescribeAlarmsForMetric

  • cloudwatch:GetMetricData

  • cloudwatch:GetMetricStatistics

Amazon CloudWatch Events

These are the Read actions for Amazon CloudWatch Events.

  • events:DescribeRule

  • events:TestEventPattern

Amazon CloudWatch Logs

These are the Read actions for Amazon CloudWatch Logs.

  • logs:FilterLogEvents

  • logs:GetLogEvents

  • logs:TestMetricFilter

AWS CodeBuild

These are the Read actions for AWS CodeBuild.

  • codebuild:BatchGetBuilds

  • codebuild:BatchGetProjects

  • codebuild:ListConnectedOAuthAccounts

  • codebuild:ListCuratedEnvironmentImages

  • codebuild:ListRepositories

AWS CodeCommit

These are the Read actions for AWS CodeCommit.

  • codecommit:BatchGetRepositories

  • codecommit:GetBlob

  • codecommit:GetBranch

  • codecommit:GetCommit

  • codecommit:GetObjectIdentifier

  • codecommit:GetReferences

  • codecommit:GetRepository

  • codecommit:GetRepositoryTriggers

  • codecommit:GetTree

  • codecommit:GitPull

AWS CodeDeploy

These are the Read actions for AWS CodeDeploy.

  • codedeploy:BatchGetApplicationRevisions

  • codedeploy:BatchGetApplications

  • codedeploy:BatchGetDeploymentGroups

  • codedeploy:BatchGetDeploymentInstances

  • codedeploy:BatchGetDeployments

  • codedeploy:BatchGetOnPremisesInstances

AWS CodePipeline

These are the Read actions for AWS CodePipeline.

  • codepipeline:GetJobDetails

  • codepipeline:GetPipeline

  • codepipeline:GetPipelineExecution

  • codepipeline:GetPipelineState

  • codepipeline:GetThirdPartyJobDetails

  • codepipeline:ListActionTypes

AWS CodeStar

These are the Read actions for AWS CodeStar.

  • codestar:DescribeProject

  • codestar:DescribeUserProfile

  • codestar:GetExtendedAccess

Amazon Cognito Identity

These are the Read actions for Amazon Cognito Identity.

  • cognito-identity:DescribeIdentity

  • cognito-identity:DescribeIdentityPool

  • cognito-identity:GetCredentialsForIdentity

  • cognito-identity:GetIdentityPoolRoles

  • cognito-identity:GetOpenIdToken

  • cognito-identity:GetOpenIdTokenForDeveloperIdentity

  • cognito-identity:LookupDeveloperIdentity

Amazon Cognito Sync

These are the Read actions for Amazon Cognito Sync.

  • cognito-sync:DescribeDataset

  • cognito-sync:DescribeIdentityPoolUsage

  • cognito-sync:DescribeIdentityUsage

  • cognito-sync:GetBulkPublishDetails

  • cognito-sync:GetCognitoEvents

  • cognito-sync:GetIdentityPoolConfiguration

  • cognito-sync:ListIdentityPoolUsage

  • cognito-sync:ListRecords

  • cognito-sync:QueryRecords

Amazon Cognito User Pools

These are the Read actions for Amazon Cognito User Pools.

  • cognito-idp:AdminGetDevice

  • cognito-idp:AdminGetUser

  • cognito-idp:DescribeUserImportJob

  • cognito-idp:DescribeUserPool

  • cognito-idp:DescribeUserPoolClient

  • cognito-idp:GetCSVHeader

  • cognito-idp:GetDevice

  • cognito-idp:GetGroup

  • cognito-idp:GetUser

  • cognito-idp:GetUserAttributeVerificationCode

AWS Config

These are the Read actions for AWS Config.

  • config:DeliverConfigSnapshot

  • config:GetComplianceDetailsByConfigRule

  • config:GetComplianceDetailsByResource

  • config:GetComplianceSummaryByConfigRule

  • config:GetComplianceSummaryByResourceType

  • config:GetResourceConfigHistory

  • config:GetResources

  • config:GetTagKeys

AWS Cost and Usage Report

These are the Read actions for AWS Cost and Usage Report.

  • cur:DescribeReportDefinitions

Data Pipeline

These are the Read actions for Data Pipeline.

  • datapipeline:DescribeObjects

  • datapipeline:EvaluateExpression

  • datapipeline:GetPipelineDefinition

  • datapipeline:QueryObjects

  • datapipeline:ValidatePipelineDefinition

AWS Database Migration Service

These are the Read actions for AWS Database Migration Service.

  • dms:DescribeAccountAttributes

  • dms:DescribeCertificates

  • dms:DescribeConnections

  • dms:DescribeEndpointTypes

  • dms:DescribeEndpoints

  • dms:DescribeEventCategories

  • dms:DescribeEventSubscriptions

  • dms:DescribeEvents

  • dms:DescribeOrderableReplicationInstances

  • dms:DescribeRefreshSchemasStatus

  • dms:DescribeReplicationInstances

  • dms:DescribeReplicationSubnetGroups

  • dms:DescribeReplicationTasks

  • dms:DescribeSchemas

  • dms:DescribeTableStatistics

  • dms:TestConnection

AWS Device Farm

These are the Read actions for AWS Device Farm.

  • devicefarm:GetAccountSettings

  • devicefarm:GetDevice

  • devicefarm:GetDevicePool

  • devicefarm:GetDevicePoolCompatibility

  • devicefarm:GetJob

  • devicefarm:GetNetworkProfile

  • devicefarm:GetOfferingStatus

  • devicefarm:GetProject

  • devicefarm:GetRemoteAccessSession

  • devicefarm:GetRun

  • devicefarm:GetSuite

  • devicefarm:GetTest

  • devicefarm:GetUpload

AWS Direct Connect

These are the Read actions for AWS Direct Connect.

  • directconnect:ConfirmConnection

  • directconnect:ConfirmPrivateVirtualInterface

  • directconnect:ConfirmPublicVirtualInterface

AWS Directory Service

These are the Read actions for AWS Directory Service.

  • ds:DescribeConditionalForwarders

  • ds:DescribeEventTopics

  • ds:DescribeSnapshots

  • ds:DescribeTrusts

  • ds:GetDirectoryLimits

  • ds:GetSnapshotLimits

  • ds:ListAuthorizedApplications

  • ds:ListIpRoutes

  • ds:ListTagsForResource

  • ds:VerifyTrust

Amazon DynamoDB

These are the Read actions for Amazon DynamoDB.

  • dynamodb:BatchGetItem

  • dynamodb:DescribeLimits

  • dynamodb:DescribeReservedCapacity

  • dynamodb:DescribeReservedCapacityOfferings

  • dynamodb:DescribeStream

  • dynamodb:DescribeTable

  • dynamodb:DescribeTimeToLive

  • dynamodb:GetItem

  • dynamodb:GetRecords

  • dynamodb:GetShardIterator

  • dynamodb:ListStreams

  • dynamodb:ListTagsOfResource

  • dynamodb:Query

  • dynamodb:Scan

Amazon DynamoDB Accelerator (DAX)

These are the Read actions for Amazon DynamoDB Accelerator (DAX).

  • DynamoDBAccelerator:BatchGetItem

  • DynamoDBAccelerator:DescribeParameters

  • DynamoDBAccelerator:DescribeTable

  • DynamoDBAccelerator:GetItem

  • DynamoDBAccelerator:ListTags

  • DynamoDBAccelerator:Query

  • DynamoDBAccelerator:Scan

Amazon EC2

These are the Read actions for Amazon EC2.

  • ec2:DescribeScheduledInstanceAvailability

  • ec2:DescribeScheduledInstances

  • ec2:DescribeSecurityGroupReferences

  • ec2:DescribeStaleSecurityGroups

  • ec2:DescribeTags

  • ec2:DescribeVolumesModifications

  • ec2:DescribeVpnConnections

  • ec2:GetConsoleOutput

  • ec2:GetConsoleScreenshot

  • ec2:GetHostReservationPurchasePreview

  • ec2:GetPasswordData

  • ec2:GetReservedInstancesExchangeQuote

Amazon EC2 Container Registry

These are the Read actions for Amazon EC2 Container Registry.

  • ecr:BatchCheckLayerAvailability

  • ecr:BatchGetImage

  • ecr:DescribeImages

  • ecr:GetAuthorizationToken

  • ecr:GetDownloadUrlForLayer

  • ecr:GetRepositoryPolicy

Amazon EC2 Container Service

These are the Read actions for Amazon EC2 Container Service.

  • ecs:DescribeClusters

  • ecs:DescribeContainerInstances

  • ecs:DescribeServices

  • ecs:DescribeTaskDefinition

  • ecs:DescribeTasks

Amazon ElastiCache

These are the Read actions for Amazon ElastiCache.

  • elasticache:ListTagsForResource

AWS Elastic Beanstalk

These are the Read actions for AWS Elastic Beanstalk.

  • elasticbeanstalk:CheckDNSAvailability

  • elasticbeanstalk:DescribeConfigurationOptions

  • elasticbeanstalk:DescribeConfigurationSettings

  • elasticbeanstalk:DescribeEnvironmentHealth

  • elasticbeanstalk:DescribeEnvironmentManagedActionHistory

  • elasticbeanstalk:DescribeEnvironmentManagedActions

  • elasticbeanstalk:DescribeEnvironmentResources

  • elasticbeanstalk:DescribeEvents

  • elasticbeanstalk:DescribeInstancesHealth

  • elasticbeanstalk:DescribePlatformVersion

  • elasticbeanstalk:RequestEnvironmentInfo

  • elasticbeanstalk:RetrieveEnvironmentInfo

  • elasticbeanstalk:ValidateConfigurationSettings

Amazon Elastic File System

These are the Read actions for Amazon Elastic File System.

  • elasticfilesystem:DescribeMountTargetSecurityGroups

  • elasticfilesystem:DescribeMountTargets

  • elasticfilesystem:DescribeTags

Elastic Load Balancing V2

These are the Read actions for Elastic Load Balancing V2.

  • elasticloadbalancing:DescribeLoadBalancerAttributes

  • elasticloadbalancing:DescribeRules

  • elasticloadbalancing:DescribeSSLPolicies

  • elasticloadbalancing:DescribeTags

  • elasticloadbalancing:DescribeTargetGroupAttributes

Amazon Elastic MapReduce

These are the Read actions for Amazon Elastic MapReduce.

  • elasticmapreduce:DescribeCluster

  • elasticmapreduce:DescribeJobFlows

  • elasticmapreduce:DescribeSecurityConfiguration

  • elasticmapreduce:DescribeStep

Amazon Elastic Transcoder

These are the Read actions for Amazon Elastic Transcoder.

  • elastictranscoder:ReadJob

  • elastictranscoder:ReadPipeline

  • elastictranscoder:ReadPreset

Amazon Elasticsearch Service

These are the Read actions for Amazon Elasticsearch Service.

  • es:DescribeElasticsearchDomainConfig

  • es:ESHttpGet

  • es:ESHttpHead

  • es:ListTags

Amazon GameLift

These are the Read actions for Amazon GameLift.

  • gamelift:DescribeAlias

  • gamelift:DescribeBuild

  • gamelift:DescribeEC2InstanceLimits

  • gamelift:DescribeFleetAttributes

  • gamelift:DescribeFleetCapacity

  • gamelift:DescribeFleetEvents

  • gamelift:DescribeFleetPortSettings

  • gamelift:DescribeFleetUtilization

  • gamelift:DescribeGameSessionDetails

  • gamelift:DescribeGameSessions

  • gamelift:DescribeInstances

  • gamelift:DescribePlayerSessions

  • gamelift:DescribeRuntimeConfiguration

  • gamelift:DescribeScalingPolicies

  • gamelift:GetGameSessionLogUrl

  • gamelift:GetInstanceAccess

  • gamelift:RequestUploadCredentials

  • gamelift:ResolveAlias

  • gamelift:SearchGameSessions

Amazon Glacier

These are the Read actions for Amazon Glacier.

  • glacier:DescribeJob

  • glacier:DescribeVault

  • glacier:GetDataRetrievalPolicy

  • glacier:GetJobOutput

  • glacier:GetVaultAccessPolicy

  • glacier:GetVaultLock

  • glacier:GetVaultNotifications

AWS Health APIs and Notifications

These are the Read actions for AWS Health APIs and Notifications.

  • health:DescribeAffectedEntities

  • health:DescribeEntityAggregates

  • health:DescribeEventAggregates

  • health:DescribeEventDetails

  • health:DescribeEventTypes

  • health:DescribeEvents

Identity And Access Management

These are the Read actions for Identity And Access Management.

  • iam:GenerateCredentialReport

  • iam:GenerateServiceLastAccessedDetails

  • iam:GetAccessKeyLastUsed

  • iam:GetAccountAuthorizationDetails

  • iam:GetAccountPasswordPolicy

  • iam:GetContextKeysForCustomPolicy

  • iam:GetContextKeysForPrincipalPolicy

  • iam:GetCredentialReport

  • iam:GetGroup

  • iam:GetGroupPolicy

  • iam:GetInstanceProfile

  • iam:GetOpenIDConnectProvider

  • iam:GetPolicy

  • iam:GetPolicyVersion

  • iam:GetRole

  • iam:GetRolePolicy

  • iam:GetSAMLProvider

  • iam:GetSSHPublicKey

  • iam:GetServerCertificate

  • iam:GetServiceLastAccessedDetails

  • iam:GetServiceLastAccessedDetailsWithEntities

  • iam:GetUser

  • iam:GetUserPolicy

  • iam:SimulateCustomPolicy

  • iam:SimulatePrincipalPolicy

AWS Import Export Disk Service

These are the Read actions for AWS Import Export Disk Service.

  • importexport:GetShippingLabel

  • importexport:GetStatus

Amazon Inspector

These are the Read actions for Amazon Inspector.

  • inspector:DescribeAssessmentRuns

  • inspector:DescribeAssessmentTargets

  • inspector:DescribeAssessmentTemplates

  • inspector:DescribeCrossAccountAccessRole

  • inspector:DescribeFindings

  • inspector:DescribeResourceGroups

  • inspector:DescribeRulesPackages

  • inspector:GetTelemetryMetadata

  • inspector:PreviewAgents

AWS IoT

These are the Read actions for AWS IoT.

  • iot:DescribeCACertificate

  • iot:DescribeCertificate

  • iot:DescribeEndpoint

  • iot:DescribeThing

  • iot:DescribeThingType

  • iot:GetLoggingOptions

  • iot:GetPolicy

  • iot:GetPolicyVersion

  • iot:GetRegistrationCode

  • iot:GetThingShadow

  • iot:GetTopicRule

AWS Key Management Service

These are the Read actions for AWS Key Management Service.

  • kms:DescribeKey

  • kms:GenerateRandom

  • kms:GetKeyPolicy

  • kms:GetKeyRotationStatus

  • kms:GetParametersForImport

  • kms:ListGrants

  • kms:ListResourceTags

  • kms:ReEncryptFrom

  • kms:ReEncryptTo

Amazon Kinesis

These are the Read actions for Amazon Kinesis.

  • kinesis:DescribeLimits

  • kinesis:DescribeStream

  • kinesis:GetRecords

  • kinesis:GetShardIterator

  • kinesis:ListTagsForStream

Amazon Kinesis Analytics

These are the Read actions for Amazon Kinesis Analytics.

  • kinesisanalytics:DescribeApplication

  • kinesisanalytics:DiscoverInputSchema

AWS Lambda

These are the Read actions for AWS Lambda.

  • lambda:GetAccountSettings

  • lambda:GetAlias

  • lambda:GetEventSourceMapping

  • lambda:GetFunction

  • lambda:GetFunctionConfiguration

  • lambda:GetPolicy

  • lambda:ListTags

Amazon Lex

These are the Read actions for Amazon Lex.

  • lex:GetBot

  • lex:GetBotAlias

  • lex:GetBotChannelAssociation

  • lex:GetBuiltinIntent

  • lex:GetBuiltinIntents

  • lex:GetBuiltinSlotTypes

  • lex:GetIntent

  • lex:GetSlotType

Amazon Lightsail

These are the Read actions for Amazon Lightsail.

  • lightsail:DownloadDefaultKeyPair

  • lightsail:GetActiveNames

  • lightsail:GetDomains

  • lightsail:GetInstance

  • lightsail:GetInstanceAccessDetails

  • lightsail:GetInstanceMetricData

  • lightsail:GetInstancePortStates

  • lightsail:GetInstanceSnapshot

  • lightsail:GetInstanceState

  • lightsail:GetKeyPairs

  • lightsail:GetOperation

  • lightsail:GetOperations

  • lightsail:GetOperationsForResource

  • lightsail:GetStaticIp

Amazon Machine Learning

These are the Read actions for Amazon Machine Learning.

  • machinelearning:GetBatchPrediction

  • machinelearning:GetDataSource

  • machinelearning:GetEvaluation

  • machinelearning:GetMLModel

Manage Amazon API Gateway

These are the Read actions for Manage Amazon API Gateway.

  • apigateway:GET

  • apigateway:HEAD

  • apigateway:OPTIONS

Amazon Mechanical Turk

These are the Read actions for Amazon Mechanical Turk.

  • mechanicalturk:GetAccountBalance

  • mechanicalturk:GetAssignment

  • mechanicalturk:GetAssignmentsForHIT

  • mechanicalturk:GetBlockedWorkers

  • mechanicalturk:GetBonusPayments

  • mechanicalturk:GetFileUploadURL

  • mechanicalturk:GetHIT

  • mechanicalturk:GetHITsForQualificationType

  • mechanicalturk:GetQualificationRequests

  • mechanicalturk:GetQualificationScore

  • mechanicalturk:GetQualificationType

  • mechanicalturk:GetQualificationsForQualificationType

  • mechanicalturk:GetRequesterStatistic

  • mechanicalturk:GetRequesterWorkerStatistic

  • mechanicalturk:GetReviewResultsForHIT

  • mechanicalturk:GetReviewableHITs

  • mechanicalturk:SearchHITs

  • mechanicalturk:SearchQualificationTypes

Amazon Message Delivery Service

These are the Read actions for Amazon Message Delivery Service.

  • ec2messages:GetEndpoint

  • ec2messages:GetMessages

Amazon Mobile Analytics

These are the Read actions for Amazon Mobile Analytics.

  • mobileanalytics:GetFinancialReports

  • mobileanalytics:GetReports

AWS Mobile Hub

These are the Read actions for AWS Mobile Hub.

  • mobilehub:GetProject

  • mobilehub:ValidateProject

  • mobilehub:VerifyServiceRole

AWS OpsWorks

These are the Read actions for AWS OpsWorks.

  • opsworks:GetHostnameSuggestion

AWS Organizations

These are the Read actions for AWS Organizations.

  • organizations:DescribeAccount

  • organizations:DescribeCreateAccountStatus

  • organizations:DescribeHandshake

  • organizations:DescribeOrganization

  • organizations:DescribeOrganizationalUnit

  • organizations:DescribePolicy

Amazon Pinpoint

These are the Read actions for Amazon Pinpoint.

  • mobiletargeting:GetApnsChannel

  • mobiletargeting:GetCampaign

  • mobiletargeting:GetCampaignActivities

  • mobiletargeting:GetCampaignVersion

  • mobiletargeting:GetCampaignVersions

  • mobiletargeting:GetEndpoint

  • mobiletargeting:GetGcmChannel

  • mobiletargeting:GetImportJob

  • mobiletargeting:GetReports

  • mobiletargeting:GetSegment

  • mobiletargeting:GetSegmentImportJobs

  • mobiletargeting:GetSegmentVersion

  • mobiletargeting:GetSegmentVersions

Amazon Polly

These are the Read actions for Amazon Polly.

  • polly:GetLexicon

  • polly:SynthesizeSpeech

Amazon RDS

These are the Read actions for Amazon RDS.

  • rds:DescribeDBClusterSnapshots

  • rds:DownloadCompleteDBLogFile

  • rds:DownloadDBLogFilePortion

  • rds:ListTagsForResource

Amazon Redshift

These are the Read actions for Amazon Redshift.

  • redshift:DescribeClusterParameterGroups

  • redshift:DescribeClusterParameters

  • redshift:DescribeClusterSecurityGroups

  • redshift:DescribeClusterSnapshots

  • redshift:DescribeClusterSubnetGroups

  • redshift:DescribeClusterVersions

  • redshift:DescribeDefaultClusterParameters

  • redshift:DescribeEventCategories

  • redshift:DescribeEventSubscriptions

  • redshift:DescribeHsmClientCertificates

  • redshift:DescribeHsmConfigurations

  • redshift:DescribeLoggingStatus

  • redshift:DescribeOrderableClusterOptions

  • redshift:DescribeReservedNodeOfferings

  • redshift:DescribeReservedNodes

  • redshift:DescribeResize

  • redshift:DescribeSnapshotCopyGrants

  • redshift:DescribeTableRestoreStatus

  • redshift:DescribeTags

  • redshift:GetClusterCredentials

Amazon Rekognition

These are the Read actions for Amazon Rekognition.

  • rekognition:CompareFaces

  • rekognition:DetectFaces

  • rekognition:DetectLabels

  • rekognition:DetectModerationLabels

  • rekognition:ListCollections

  • rekognition:ListFaces

  • rekognition:SearchFaces

  • rekognition:SearchFacesByImage

Amazon Resource Group Tagging API

These are the Read actions for Amazon Resource Group Tagging API.

  • tag:GetResources

  • tag:GetTagKeys

  • tag:GetTagValues

Amazon Route 53

These are the Read actions for Amazon Route 53.

  • route53:GetHealthCheck

  • route53:GetTrafficPolicy

  • route53:GetTrafficPolicyInstance

  • route53:GetTrafficPolicyInstanceCount

  • route53:ListHealthChecks

  • route53:ListTrafficPolicies

  • route53:ListTrafficPolicyInstances

  • route53:ListTrafficPolicyInstancesByHostedZone

  • route53:ListTrafficPolicyInstancesByPolicy

  • route53:ListTrafficPolicyVersions

  • route53:TestDNSAnswer

Amazon Route53 Domains

These are the Read actions for Amazon Route53 Domains.

  • route53domains:CheckDomainAvailability

  • route53domains:GetContactReachabilityStatus

  • route53domains:GetDomainDetail

  • route53domains:GetDomainSuggestions

  • route53domains:GetOperationDetail

  • route53domains:ViewBilling

Amazon S3

These are the Read actions for Amazon S3.

  • s3:GetAccelerateConfiguration

  • s3:GetBucketAcl

  • s3:GetBucketCORS

  • s3:GetBucketLocation

  • s3:GetBucketLogging

  • s3:GetBucketNotification

  • s3:GetBucketPolicy

  • s3:GetBucketRequestPayment

  • s3:GetBucketTagging

  • s3:GetBucketVersioning

  • s3:GetBucketWebsite

  • s3:GetLifecycleConfiguration

  • s3:GetObject

  • s3:GetObjectAcl

  • s3:GetObjectTorrent

  • s3:GetObjectVersion

  • s3:GetObjectVersionAcl

  • s3:GetObjectVersionTorrent

  • s3:GetReplicationConfiguration

  • s3:ListBucketMultipartUploads

  • s3:ListBucketVersions

  • s3:ListMultipartUploadParts

Amazon SES

These are the Read actions for Amazon SES.

  • ses:DescribeActiveReceiptRuleSet

  • ses:DescribeReceiptRule

  • ses:DescribeReceiptRuleSet

  • ses:GetIdentityDkimAttributes

  • ses:GetIdentityMailFromDomainAttributes

  • ses:GetIdentityNotificationAttributes

  • ses:GetIdentityPolicies

  • ses:GetIdentityVerificationAttributes

  • ses:GetSendQuota

  • ses:GetSendStatistics

  • ses:VerifyDomainDkim

  • ses:VerifyDomainIdentity

  • ses:VerifyEmailAddress

  • ses:VerifyEmailIdentity

Amazon SNS

These are the Read actions for Amazon SNS.

  • sns:CheckIfPhoneNumberIsOptedOut

  • sns:GetEndpointAttributes

  • sns:GetPlatformApplicationAttributes

  • sns:GetSMSAttributes

  • sns:GetSubscriptionAttributes

  • sns:GetTopicAttributes

  • sns:ListPhoneNumbersOptedOut

Amazon SQS

These are the Read actions for Amazon SQS.

  • sqs:GetQueueAttributes

  • sqs:GetQueueUrl

  • sqs:ListDeadLetterSourceQueues

  • sqs:ReceiveMessage

AWS Security Token Service

These are the Read actions for AWS Security Token Service.

  • sts:GetCallerIdentity

  • sts:GetFederationToken

  • sts:GetSessionToken

AWS Service Catalog

These are the Read actions for AWS Service Catalog.

  • servicecatalog:DescribeConstraint

  • servicecatalog:DescribePortfolio

  • servicecatalog:DescribeProduct

  • servicecatalog:DescribeProductAsAdmin

  • servicecatalog:DescribeProductView

  • servicecatalog:DescribeProvisioningArtifact

  • servicecatalog:DescribeProvisioningParameters

  • servicecatalog:DescribeRecord

AWS Shield

These are the Read actions for AWS Shield.

  • shield:DescribeAttack

  • shield:DescribeProtection

  • shield:DescribeSubscription

Amazon Simple Systems Manager

These are the Read actions for Amazon Simple Systems Manager.

  • ssm:DescribeActivations

  • ssm:DescribeAssociation

  • ssm:DescribeAutomationActions

  • ssm:DescribeAutomationExecutions

  • ssm:DescribeAvailablePatches

  • ssm:DescribeDocument

  • ssm:DescribeDocumentPermission

  • ssm:DescribeEffectiveInstanceAssociations

  • ssm:DescribeEffectivePatchesForPatchBaseline

  • ssm:DescribeInstanceAssociationsStatus

  • ssm:DescribeInstanceInformation

  • ssm:DescribeInstancePatchStates

  • ssm:DescribeInstancePatchStatesForPatchGroup

  • ssm:DescribeInstancePatches

  • ssm:DescribeMaintenanceWindowExecutionTaskInvocations

  • ssm:DescribeMaintenanceWindowExecutionTasks

  • ssm:DescribeMaintenanceWindowExecutions

  • ssm:DescribeMaintenanceWindowTargets

  • ssm:DescribeMaintenanceWindowTasks

  • ssm:DescribeMaintenanceWindows

  • ssm:DescribeParameters

  • ssm:DescribePatchBaselines

  • ssm:DescribePatchGroupState

  • ssm:DescribePatchGroups

  • ssm:GetCommandInvocation

  • ssm:GetDefaultPatchBaseline

  • ssm:GetDeployablePatchSnapshotForInstance

  • ssm:GetDocument

  • ssm:GetInventory

  • ssm:GetInventorySchema

  • ssm:GetMaintenanceWindow

  • ssm:GetMaintenanceWindowExecution

  • ssm:GetMaintenanceWindowExecutionTask

  • ssm:GetParameterHistory

  • ssm:GetParameters

  • ssm:GetPatchBaseline

  • ssm:GetPatchBaselineForPatchGroup

  • ssm:ListCommandInvocations

  • ssm:ListCommands

  • ssm:ListTagsForResource

Amazon Simple Workflow Service

These are the Read actions for Amazon Simple Workflow Service.

  • swf:CountClosedWorkflowExecutions

  • swf:CountOpenWorkflowExecutions

  • swf:CountPendingActivityTasks

  • swf:CountPendingDecisionTasks

  • swf:DescribeActivityType

  • swf:DescribeDomain

  • swf:DescribeWorkflowExecution

  • swf:DescribeWorkflowType

  • swf:GetWorkflowExecutionHistory

Amazon SimpleDB

These are the Read actions for Amazon SimpleDB.

  • sdb:GetAttributes

  • sdb:Select

AWS Step Functions

These are the Read actions for AWS Step Functions.

  • states:DescribeActivity

  • states:DescribeExecution

  • states:DescribeStateMachine

  • states:GetExecutionHistory

  • states:ListExecutions

Amazon Storage Gateway

These are the Read actions for Amazon Storage Gateway.

  • storagegateway:DescribeBandwidthRateLimit

  • storagegateway:DescribeCache

  • storagegateway:DescribeCachediSCSIVolumes

  • storagegateway:DescribeChapCredentials

  • storagegateway:DescribeGatewayInformation

  • storagegateway:DescribeMaintenanceStartTime

  • storagegateway:DescribeSnapshotSchedule

  • storagegateway:DescribeStorediSCSIVolumes

  • storagegateway:DescribeTapeArchives

  • storagegateway:DescribeTapeRecoveryPoints

  • storagegateway:DescribeTapes

  • storagegateway:DescribeUploadBuffer

  • storagegateway:DescribeVTLDevices

  • storagegateway:DescribeWorkingStorage

  • storagegateway:ListTagsForResource

  • storagegateway:ListTapes

  • storagegateway:ListVolumeInitiators

AWS WAF

These are the Read actions for AWS WAF.

  • waf:GetByteMatchSet

  • waf:GetChangeToken

  • waf:GetChangeTokenStatus

  • waf:GetIPSet

  • waf:GetRule

  • waf:GetSampledRequests

  • waf:GetSizeConstraintSet

  • waf:GetSqlInjectionMatchSet

  • waf:GetWebACL

  • waf:GetXssMatchSet

AWS WAF Regional

These are the Read actions for AWS WAF Regional.

  • waf-regional:GetByteMatchSet

  • waf-regional:GetChangeToken

  • waf-regional:GetChangeTokenStatus

  • waf-regional:GetIPSet

  • waf-regional:GetRule

  • waf-regional:GetSampledRequests

  • waf-regional:GetSizeConstraintSet

  • waf-regional:GetSqlInjectionMatchSet

  • waf-regional:GetWebACL

  • waf-regional:GetWebACLForResource

  • waf-regional:GetXssMatchSet

Amazon WorkDocs

These are the Read actions for Amazon WorkDocs.

  • workdocs:CheckAlias

  • workdocs:GetDocument

  • workdocs:GetDocumentPath

  • workdocs:GetDocumentVersion

  • workdocs:GetFolder

  • workdocs:GetFolderPath

Amazon WorkMail

These are the Read actions for Amazon WorkMail.

  • workmail:GetMailDomainDetails

  • workmail:GetMailGroupDetails

  • workmail:GetMailUserDetails

  • workmail:GetMobileDeviceDetails

  • workmail:GetMobileDevicesForUser

  • workmail:GetMobilePolicyDetails

  • workmail:ListMembersInMailGroup

  • workmail:SearchMembers

Amazon WorkSpaces

These are the Read actions for Amazon WorkSpaces.

  • workspaces:DescribeWorkspacesConnectionStatus

AWS XRay

These are the Read actions for AWS XRay.

  • xray:BatchGetTraces

  • xray:GetServiceGraph

  • xray:GetTraceGraph

  • xray:GetTraceSummaries

On this page: