| appflow:CreateConnectorProfile | Admin |
| appflow:CreateFlow | Admin |
| appflow:DeleteConnectorProfile | Admin |
| appflow:DeleteFlow | Admin |
| appflow:StartFlow | Admin |
| appflow:StopFlow | Admin |
| appflow:UpdateConnectorProfile | Admin |
| appflow:UpdateFlow | Admin |
| iam:PassRole | Admin |
| appflow:ListTagsForResource | Operator |
| appflow:RunFlow | Operator |
| appflow:TagResource | Operator |
| appflow:UntagResource | Operator |
| appflow:DescribeConnectorEntity | Metadata |
| appflow:DescribeConnectorFields | Metadata |
| appflow:DescribeConnectorProfiles | Metadata |
| appflow:DescribeConnectors | Metadata |
| appflow:DescribeFlowExecution | Metadata |
| appflow:DescribeFlowExecutionRecords | Metadata |
| appflow:DescribeFlows | Metadata |
| appflow:ListConnectorEntities | Metadata |
| appflow:ListConnectorFields | Metadata |
| appflow:ListFlows | Metadata |
| iam:ListRoles | Metadata |
| kms:DescribeKey | Metadata |
| kms:ListAliases | Metadata |
| s3:GetBucketLocation | Metadata |
| s3:GetBucketPolicy | Metadata |
