| datasync:CancelTaskExecution | Operator |
| datasync:StartSyncTask | Operator |
| datasync:StartTaskExecution | Operator |
| datasync:TagResource | Operator |
| datasync:UntagResource | Operator |
| s3:GetObject | Operator |
| datasync:DescribeAgent | Metadata |
| datasync:DescribeLocationEfs | Metadata |
| datasync:DescribeLocationNfs | Metadata |
| datasync:DescribeLocationS3 | Metadata |
| datasync:DescribeTask | Metadata |
| datasync:DescribeTaskExecution | Metadata |
| datasync:ListAgents | Metadata |
| datasync:ListLocations | Metadata |
| datasync:ListTagsForResource | Metadata |
| datasync:ListTaskExecutions | Metadata |
| datasync:ListTasks | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| elasticfilesystem:DescribeFileSystems | Metadata |
| elasticfilesystem:DescribeMountTargetSecurityGroups | Metadata |
| elasticfilesystem:DescribeMountTargets | Metadata |
| elasticfilesystem:DescribeTags | Metadata |
| iam:GetRole | Metadata |
| iam:ListRoles | Metadata |
| logs:DescribeLogGroups | Metadata |
| s3:ListBuckets | Metadata |
