| cognito-identity:TagResource | Operator |
| cognito-identity:UntagResource | Operator |
| cognito-idp:TagResource | Operator |
| cognito-idp:UntagResource | Operator |
| cognito-idp:GetSigningCertificate | ReadOnly |
| cognito-sync:QueryRecords | ReadOnly |
| cognito-identity:DescribeIdentity | Metadata |
| cognito-identity:DescribeIdentityPool | Metadata |
| cognito-identity:GetIdentityPoolRoles | Metadata |
| cognito-identity:GetPrincipalTagAttributeMap | Metadata |
| cognito-identity:ListIdentities | Metadata |
| cognito-identity:ListIdentityPools | Metadata |
| cognito-identity:ListTagsForResource | Metadata |
| cognito-idp:AdminListUserAuthEvents | Metadata |
| cognito-idp:DescribeIdentityProvider | Metadata |
| cognito-idp:DescribeResourceServer | Metadata |
| cognito-idp:DescribeRiskConfiguration | Metadata |
| cognito-idp:DescribeUserImportJob | Metadata |
| cognito-idp:DescribeUserPool | Metadata |
| cognito-idp:DescribeUserPoolClient | Metadata |
| cognito-idp:DescribeUserPoolDomain | Metadata |
| cognito-idp:GetCSVHeader | Metadata |
| cognito-idp:GetIdentityProviderByIdentifier | Metadata |
| cognito-idp:GetUICustomization | Metadata |
| cognito-idp:ListDevices | Metadata |
| cognito-idp:ListGroups | Metadata |
| cognito-idp:ListIdentityProviders | Metadata |
| cognito-idp:ListResourceServers | Metadata |
| cognito-idp:ListTagsForResource | Metadata |
| cognito-idp:ListUserImportJobs | Metadata |
| cognito-idp:ListUserPoolClients | Metadata |
| cognito-idp:ListUserPools | Metadata |
| cognito-idp:ListUsers | Metadata |
| cognito-idp:ListUsersInGroup | Metadata |
| cognito-sync:DescribeDataset | Metadata |
| cognito-sync:DescribeIdentityPoolUsage | Metadata |
| cognito-sync:DescribeIdentityUsage | Metadata |
| cognito-sync:GetBulkPublishDetails | Metadata |
| cognito-sync:GetCognitoEvents | Metadata |
| cognito-sync:GetIdentityPoolConfiguration | Metadata |
| cognito-sync:ListDatasets | Metadata |
| cognito-sync:ListIdentityPoolUsage | Metadata |
| cognito-sync:ListRecords | Metadata |
