| config:DeleteAggregationAuthorization | Admin |
| config:DeleteConfigRule | Admin |
| config:DeleteConfigurationAggregator | Admin |
| config:DeleteConfigurationRecorder | Admin |
| config:DeleteConformancePack | Admin |
| config:DeleteDeliveryChannel | Admin |
| config:DeleteEvaluationResults | Admin |
| config:DeleteOrganizationConfigRule | Admin |
| config:DeleteOrganizationConformancePack | Admin |
| config:DeletePendingAggregationRequest | Admin |
| config:DeleteRemediationConfiguration | Admin |
| config:DeleteRemediationExceptions | Admin |
| config:DeleteResourceConfig | Admin |
| config:DeleteRetentionConfiguration | Admin |
| config:PutAggregationAuthorization | Admin |
| config:PutConfigRule | Admin |
| config:PutConfigurationAggregator | Admin |
| config:PutConfigurationRecorder | Admin |
| config:PutConformancePack | Admin |
| config:PutDeliveryChannel | Admin |
| config:PutOrganizationConfigRule | Admin |
| config:PutOrganizationConformancePack | Admin |
| config:PutRemediationConfigurations | Admin |
| config:PutRemediationExceptions | Admin |
| config:PutResourceConfig | Admin |
| config:PutRetentionConfiguration | Admin |
| config:StartRemediationExecution | Admin |
| iam:PassRole | Admin |
| config:DeliverConfigSnapshot | Operator |
| config:PutEvaluations | Operator |
| config:StartConfigRulesEvaluation | Operator |
| config:StartConfigurationRecorder | Operator |
| config:StopConfigurationRecorder | Operator |
| config:TagResource | Operator |
| config:UntagResource | Operator |
| config:BatchGetAggregateResourceConfig | Metadata |
| config:BatchGetResourceConfig | Metadata |
| config:DescribeAggregateComplianceByConfigRules | Metadata |
| config:DescribeAggregationAuthorizations | Metadata |
| config:DescribeComplianceByConfigRule | Metadata |
| config:DescribeComplianceByResource | Metadata |
| config:DescribeConfigRuleEvaluationStatus | Metadata |
| config:DescribeConfigRules | Metadata |
| config:DescribeConfigurationAggregatorSourcesStatus | Metadata |
| config:DescribeConfigurationAggregators | Metadata |
| config:DescribeConfigurationRecorderStatus | Metadata |
| config:DescribeConfigurationRecorders | Metadata |
| config:DescribeConformancePackCompliance | Metadata |
| config:DescribeConformancePackStatus | Metadata |
| config:DescribeConformancePacks | Metadata |
| config:DescribeDeliveryChannelStatus | Metadata |
| config:DescribeDeliveryChannels | Metadata |
| config:DescribeOrganizationConfigRuleStatuses | Metadata |
| config:DescribeOrganizationConfigRules | Metadata |
| config:DescribeOrganizationConformancePackStatuses | Metadata |
| config:DescribeOrganizationConformancePacks | Metadata |
| config:DescribePendingAggregationRequests | Metadata |
| config:DescribeRemediationConfigurations | Metadata |
| config:DescribeRemediationExceptions | Metadata |
| config:DescribeRemediationExecutionStatus | Metadata |
| config:DescribeRetentionConfigurations | Metadata |
| config:GetAggregateComplianceDetailsByConfigRule | Metadata |
| config:GetAggregateConfigRuleComplianceSummary | Metadata |
| config:GetAggregateDiscoveredResourceCounts | Metadata |
| config:GetAggregateResourceConfig | Metadata |
| config:GetComplianceDetailsByConfigRule | Metadata |
| config:GetComplianceDetailsByResource | Metadata |
| config:GetComplianceSummaryByConfigRule | Metadata |
| config:GetComplianceSummaryByResourceType | Metadata |
| config:GetConformancePackComplianceDetails | Metadata |
| config:GetConformancePackComplianceSummary | Metadata |
| config:GetDiscoveredResourceCounts | Metadata |
| config:GetOrganizationConfigRuleDetailedStatus | Metadata |
| config:GetOrganizationConformancePackDetailedStatus | Metadata |
| config:GetResourceConfigHistory | Metadata |
| config:GetResources | Metadata |
| config:GetTagKeys | Metadata |
| config:ListAggregateDiscoveredResources | Metadata |
| config:ListDiscoveredResources | Metadata |
| config:ListTagsForResource | Metadata |
| config:SelectResourceConfig | Metadata |
| iam:ListRoles | Metadata |
