| cognito-identity:CreateIdentityPool | Admin |
| cognito-identity:DeleteIdentities | Admin |
| cognito-identity:DeleteIdentityPool | Admin |
| cognito-identity:GetCredentialsForIdentity | Admin |
| cognito-identity:GetId | Admin |
| cognito-identity:GetOpenIdToken | Admin |
| cognito-identity:GetOpenIdTokenForDeveloperIdentity | Admin |
| cognito-identity:LookupDeveloperIdentity | Admin |
| cognito-identity:MergeDeveloperIdentities | Admin |
| cognito-identity:SetIdentityPoolRoles | Admin |
| cognito-identity:SetPrincipalTagAttributeMap | Admin |
| cognito-identity:UnlinkDeveloperIdentity | Admin |
| cognito-identity:UnlinkIdentity | Admin |
| cognito-identity:UpdateIdentityPool | Admin |
| cognito-idp:AddCustomAttributes | Admin |
| cognito-idp:AdminAddUserToGroup | Admin |
| cognito-idp:AdminConfirmSignUp | Admin |
| cognito-idp:AdminCreateUser | Admin |
| cognito-idp:AdminDeleteUser | Admin |
| cognito-idp:AdminDeleteUserAttributes | Admin |
| cognito-idp:AdminDisableProviderForUser | Admin |
| cognito-idp:AdminDisableUser | Admin |
| cognito-idp:AdminEnableUser | Admin |
| cognito-idp:AdminForgetDevice | Admin |
| cognito-idp:AdminGetDevice | Admin |
| cognito-idp:AdminGetUser | Admin |
| cognito-idp:AdminInitiateAuth | Admin |
| cognito-idp:AdminLinkProviderForUser | Admin |
| cognito-idp:AdminListDevices | Admin |
| cognito-idp:AdminListGroupsForUser | Admin |
| cognito-idp:AdminRemoveUserFromGroup | Admin |
| cognito-idp:AdminResetUserPassword | Admin |
| cognito-idp:AdminRespondToAuthChallenge | Admin |
| cognito-idp:AdminSetUserMFAPreference | Admin |
| cognito-idp:AdminSetUserPassword | Admin |
| cognito-idp:AdminSetUserSettings | Admin |
| cognito-idp:AdminUpdateAuthEventFeedback | Admin |
| cognito-idp:AdminUpdateDeviceStatus | Admin |
| cognito-idp:AdminUpdateUserAttributes | Admin |
| cognito-idp:AdminUserGlobalSignOut | Admin |
| cognito-idp:AssociateSoftwareToken | Admin |
| cognito-idp:ChangePassword | Admin |
| cognito-idp:ConfirmDevice | Admin |
| cognito-idp:ConfirmForgotPassword | Admin |
| cognito-idp:ConfirmSignUp | Admin |
| cognito-idp:CreateGroup | Admin |
| cognito-idp:CreateIdentityProvider | Admin |
| cognito-idp:CreateResourceServer | Admin |
| cognito-idp:CreateUserImportJob | Admin |
| cognito-idp:CreateUserPool | Admin |
| cognito-idp:CreateUserPoolClient | Admin |
| cognito-idp:CreateUserPoolDomain | Admin |
| cognito-idp:DeleteGroup | Admin |
| cognito-idp:DeleteIdentityProvider | Admin |
| cognito-idp:DeleteResourceServer | Admin |
| cognito-idp:DeleteUser | Admin |
| cognito-idp:DeleteUserAttributes | Admin |
| cognito-idp:DeleteUserPool | Admin |
| cognito-idp:DeleteUserPoolClient | Admin |
| cognito-idp:DeleteUserPoolDomain | Admin |
| cognito-idp:ForgetDevice | Admin |
| cognito-idp:ForgotPassword | Admin |
| cognito-idp:GetDevice | Admin |
| cognito-idp:GetGroup | Admin |
| cognito-idp:GetJWKS | Admin |
| cognito-idp:GetOpenIdConfiguration | Admin |
| cognito-idp:GetUser | Admin |
| cognito-idp:GetUserAttributeVerificationCode | Admin |
| cognito-idp:GetUserPoolMfaConfig | Admin |
| cognito-idp:GlobalSignOut | Admin |
| cognito-idp:InitiateAuth | Admin |
| cognito-idp:ResendConfirmationCode | Admin |
| cognito-idp:RespondToAuthChallenge | Admin |
| cognito-idp:RevokeToken | Admin |
| cognito-idp:SetRiskConfiguration | Admin |
| cognito-idp:SetUICustomization | Admin |
| cognito-idp:SetUserMFAPreference | Admin |
| cognito-idp:SetUserPoolMfaConfig | Admin |
| cognito-idp:SetUserSettings | Admin |
| cognito-idp:SignUp | Admin |
| cognito-idp:StartUserImportJob | Admin |
| cognito-idp:StopUserImportJob | Admin |
| cognito-idp:UpdateAuthEventFeedback | Admin |
| cognito-idp:UpdateDeviceStatus | Admin |
| cognito-idp:UpdateGroup | Admin |
| cognito-idp:UpdateIdentityProvider | Admin |
| cognito-idp:UpdateResourceServer | Admin |
| cognito-idp:UpdateUserAttributes | Admin |
| cognito-idp:UpdateUserPool | Admin |
| cognito-idp:UpdateUserPoolClient | Admin |
| cognito-idp:UpdateUserPoolDomain | Admin |
| cognito-idp:VerifySoftwareToken | Admin |
| cognito-idp:VerifyUserAttribute | Admin |
| cognito-sync:BulkPublish | Admin |
| cognito-sync:DeleteDataset | Admin |
| cognito-sync:RegisterDevice | Admin |
| cognito-sync:SetCognitoEvents | Admin |
| cognito-sync:SetDatasetConfiguration | Admin |
| cognito-sync:SetIdentityPoolConfiguration | Admin |
| cognito-sync:SubscribeToDataset | Admin |
| cognito-sync:UnsubscribeFromDataset | Admin |
| cognito-sync:UpdateRecords | Admin |
| cognito-identity:TagResource | Operator |
| cognito-identity:UntagResource | Operator |
| cognito-idp:TagResource | Operator |
| cognito-idp:UntagResource | Operator |
| cognito-idp:GetSigningCertificate | ReadOnly |
| cognito-sync:QueryRecords | ReadOnly |
| cognito-identity:DescribeIdentity | Metadata |
| cognito-identity:DescribeIdentityPool | Metadata |
| cognito-identity:GetIdentityPoolRoles | Metadata |
| cognito-identity:GetPrincipalTagAttributeMap | Metadata |
| cognito-identity:ListIdentities | Metadata |
| cognito-identity:ListIdentityPools | Metadata |
| cognito-identity:ListTagsForResource | Metadata |
| cognito-idp:AdminListUserAuthEvents | Metadata |
| cognito-idp:DescribeIdentityProvider | Metadata |
| cognito-idp:DescribeResourceServer | Metadata |
| cognito-idp:DescribeRiskConfiguration | Metadata |
| cognito-idp:DescribeUserImportJob | Metadata |
| cognito-idp:DescribeUserPool | Metadata |
| cognito-idp:DescribeUserPoolClient | Metadata |
| cognito-idp:DescribeUserPoolDomain | Metadata |
| cognito-idp:GetCSVHeader | Metadata |
| cognito-idp:GetIdentityProviderByIdentifier | Metadata |
| cognito-idp:GetUICustomization | Metadata |
| cognito-idp:ListDevices | Metadata |
| cognito-idp:ListGroups | Metadata |
| cognito-idp:ListIdentityProviders | Metadata |
| cognito-idp:ListResourceServers | Metadata |
| cognito-idp:ListTagsForResource | Metadata |
| cognito-idp:ListUserImportJobs | Metadata |
| cognito-idp:ListUserPoolClients | Metadata |
| cognito-idp:ListUserPools | Metadata |
| cognito-idp:ListUsers | Metadata |
| cognito-idp:ListUsersInGroup | Metadata |
| cognito-sync:DescribeDataset | Metadata |
| cognito-sync:DescribeIdentityPoolUsage | Metadata |
| cognito-sync:DescribeIdentityUsage | Metadata |
| cognito-sync:GetBulkPublishDetails | Metadata |
| cognito-sync:GetCognitoEvents | Metadata |
| cognito-sync:GetIdentityPoolConfiguration | Metadata |
| cognito-sync:ListDatasets | Metadata |
| cognito-sync:ListIdentityPoolUsage | Metadata |
| cognito-sync:ListRecords | Metadata |
