| appconfig:CreateApplication | Admin |
| appconfig:CreateConfigurationProfile | Admin |
| appconfig:CreateDeploymentStrategy | Admin |
| appconfig:CreateEnvironment | Admin |
| appconfig:CreateHostedConfigurationVersion | Admin |
| appconfig:DeleteApplication | Admin |
| appconfig:DeleteConfigurationProfile | Admin |
| appconfig:DeleteDeploymentStrategy | Admin |
| appconfig:DeleteEnvironment | Admin |
| appconfig:DeleteHostedConfigurationVersion | Admin |
| appconfig:StartDeployment | Admin |
| appconfig:StopDeployment | Admin |
| appconfig:UpdateApplication | Admin |
| appconfig:UpdateConfigurationProfile | Admin |
| appconfig:UpdateDeploymentStrategy | Admin |
| appconfig:UpdateEnvironment | Admin |
| appconfig:ValidateConfiguration | Admin |
| appconfig:TagResource | Operator |
| appconfig:UntagResource | Operator |
| appconfig:GetApplication | Metadata |
| appconfig:GetConfiguration | Metadata |
| appconfig:GetConfigurationProfile | Metadata |
| appconfig:GetDeployment | Metadata |
| appconfig:GetDeploymentStrategy | Metadata |
| appconfig:GetEnvironment | Metadata |
| appconfig:GetHostedConfigurationVersion | Metadata |
| appconfig:ListApplications | Metadata |
| appconfig:ListConfigurationProfiles | Metadata |
| appconfig:ListDeploymentStrategies | Metadata |
| appconfig:ListDeployments | Metadata |
| appconfig:ListEnvironments | Metadata |
| appconfig:ListHostedConfigurationVersions | Metadata |
| appconfig:ListTagsForResource | Metadata |
| cloudwatch:DescribeAlarms | Metadata |
| iam:ListRoles | Metadata |
| tag:GetTagKeys | Metadata |
| tag:GetTagValues | Metadata |
