AWS managed policies for Application Auto Scaling

An AWS managed policy is a standalone policy that is created and administered by AWS. AWS managed policies are designed to provide permissions for many common use cases so that you can start assigning permissions to users, groups, and roles.

Keep in mind that AWS managed policies might not grant least-privilege permissions for your specific use cases because they're available for all AWS customers to use. We recommend that you reduce permissions further by defining customer managed policies that are specific to your use cases.

You cannot change the permissions defined in AWS managed policies. If AWS updates the permissions defined in an AWS managed policy, the update affects all principal identities (users, groups, and roles) that the policy is attached to. AWS is most likely to update an AWS managed policy when a new AWS service is launched or new API operations become available for existing services.

For more information, see AWS managed policies in the IAM User Guide.

AWS managed policy granting access to AppStream 2.0 and CloudWatch

Policy name: AWSApplicationAutoscalingAppStreamFleetPolicy

You can't attach AWSApplicationAutoscalingAppStreamFleetPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Amazon AppStream and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_AppStreamFleet service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to Aurora and CloudWatch

Policy name: AWSApplicationAutoscalingRDSClusterPolicy

You can't attach AWSApplicationAutoscalingRDSClusterPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Aurora and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_RDSCluster service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to Amazon Comprehend and CloudWatch

Policy name: AWSApplicationAutoscalingComprehendEndpointPolicy

You can't attach AWSApplicationAutoscalingComprehendEndpointPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Amazon Comprehend and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_ComprehendEndpoint service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to DynamoDB and CloudWatch

Policy name: AWSApplicationAutoscalingDynamoDBTablePolicy

You can't attach AWSApplicationAutoscalingDynamoDBTablePolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call DynamoDB and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_DynamoDBTable service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to Amazon ECS and CloudWatch

Policy name: AWSApplicationAutoscalingECSServicePolicy

You can't attach AWSApplicationAutoscalingECSServicePolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Amazon ECS and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_ECSService service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to ElastiCache and CloudWatch

Policy name: AWSApplicationAutoscalingElastiCacheRGPolicy

You can't attach AWSApplicationAutoscalingElastiCacheRGPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call ElastiCache and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_ElastiCacheRG service-linked role permissions policy allows Application Auto Scaling to complete the following actions on the specified resources:

AWS managed policy granting access to Amazon Keyspaces and CloudWatch

Policy name: AWSApplicationAutoscalingCassandraTablePolicy

You can't attach AWSApplicationAutoscalingCassandraTablePolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Amazon Keyspaces and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_CassandraTable service-linked role permissions policy allows Application Auto Scaling to complete the following actions on the specified resources:

AWS managed policy granting access to Lambda and CloudWatch

Policy name: AWSApplicationAutoscalingLambdaConcurrencyPolicy

You can't attach AWSApplicationAutoscalingLambdaConcurrencyPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Lambda and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_LambdaConcurrency service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to Amazon MSK and CloudWatch

Policy name: AWSApplicationAutoscalingKafkaClusterPolicy

You can't attach AWSApplicationAutoscalingKafkaClusterPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Amazon MSK and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_KafkaCluster service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to Neptune and CloudWatch

Policy name: AWSApplicationAutoscalingNeptuneClusterPolicy

You can't attach AWSApplicationAutoscalingNeptuneClusterPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Neptune and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_NeptuneCluster service-linked role permissions policy allows Application Auto Scaling to complete the following actions on the specified resources:

AWS managed policy granting access to SageMaker and CloudWatch

Policy name: AWSApplicationAutoscalingSageMakerEndpointPolicy

You can't attach AWSApplicationAutoscalingSageMakerEndpointPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call SageMaker and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_SageMakerEndpoint service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to EC2 Spot Fleet and CloudWatch

Policy name: AWSApplicationAutoscalingEC2SpotFleetRequestPolicy

You can't attach AWSApplicationAutoscalingEC2SpotFleetRequestPolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call Amazon EC2 and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_EC2SpotFleetRequest service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

AWS managed policy granting access to your custom resources and CloudWatch

Policy name: AWSApplicationAutoScalingCustomResourcePolicy

You can't attach AWSApplicationAutoScalingCustomResourcePolicy to your IAM identities (users or roles). This policy is attached to a service-linked role that allows Application Auto Scaling to call your custom resources that are available through API Gateway and CloudWatch and perform scaling on your behalf.

Permission details

The AWSServiceRoleForApplicationAutoScaling_CustomResource service-linked role permissions policy allows Application Auto Scaling to complete the following actions on all related resources ("Resource": "*"):

Application Auto Scaling updates to AWS managed policies

View details about updates to AWS managed policies for Application Auto Scaling since this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the Application Auto Scaling Document history page.