| backup:PutBackupVaultNotifications | Operator |
| backup:StartBackupJob | Operator |
| backup:StartRestoreJob | Operator |
| backup:StopBackupJob | Operator |
| backup:TagResource | Operator |
| backup:UntagResource | Operator |
| backup:DescribeBackupJob | Metadata |
| backup:DescribeBackupVault | Metadata |
| backup:DescribeProtectedResource | Metadata |
| backup:DescribeRecoveryPoint | Metadata |
| backup:DescribeRestoreJob | Metadata |
| backup:ExportBackupPlanTemplate | Metadata |
| backup:GetBackupPlan | Metadata |
| backup:GetBackupPlanFromJSON | Metadata |
| backup:GetBackupPlanFromTemplate | Metadata |
| backup:GetBackupSelection | Metadata |
| backup:GetBackupVaultAccessPolicy | Metadata |
| backup:GetBackupVaultNotifications | Metadata |
| backup:GetRecoveryPointRestoreMetadata | Metadata |
| backup:GetSupportedResourceTypes | Metadata |
| backup:ListBackupJobs | Metadata |
| backup:ListBackupPlanTemplates | Metadata |
| backup:ListBackupPlanVersions | Metadata |
| backup:ListBackupPlans | Metadata |
| backup:ListBackupSelections | Metadata |
| backup:ListBackupVaults | Metadata |
| backup:ListProtectedResources | Metadata |
| backup:ListRecoveryPointsByBackupVault | Metadata |
| backup:ListRecoveryPointsByResource | Metadata |
| backup:ListRestoreJobs | Metadata |
| backup:ListTags | Metadata |
| health:DescribeEventAggregates | Metadata |
| kms:DescribeKey | Metadata |
| kms:ListAliases | Metadata |
| kms:ListKeys | Metadata |
