| application-autoscaling:DeleteScalingPolicy | Admin |
| application-autoscaling:DeleteScheduledAction | Admin |
| application-autoscaling:PutScalingPolicy | Admin |
| application-autoscaling:PutScheduledAction | Admin |
| autoscaling-plans:CreateScalingPlan | Admin |
| autoscaling-plans:DeleteScalingPlan | Admin |
| autoscaling:DeleteWarmPool | Admin |
| autoscaling:PutWarmPool | Admin |
| aws-marketplace:BatchMeterUsage | Admin |
| aws-marketplace:MeterUsage | Admin |
| aws-marketplace:ResolveCustomer | Admin |
| ec2:AcceptAddressTransfer | Admin |
| ec2:AcceptReservedInstancesExchangeQuote | Admin |
| ec2:AllocateAddress | Admin |
| ec2:AllocateHosts | Admin |
| ec2:AssignIpv6Addresses | Admin |
| ec2:AssignPrivateIpAddresses | Admin |
| ec2:AssignPrivateNatGatewayAddress | Admin |
| ec2:AssociateAddress | Admin |
| ec2:AssociateEnclaveCertificateIamRole | Admin |
| ec2:AssociateIamInstanceProfile | Admin |
| ec2:AssociateInstanceEventWindow | Admin |
| ec2:AssociateIpamByoasn | Admin |
| ec2:AssociateIpamResourceDiscovery | Admin |
| ec2:AssociateNatGatewayAddress | Admin |
| ec2:AssociateTransitGatewayPolicyTable | Admin |
| ec2:AssociateTrunkInterface | Admin |
| ec2:AssociateVerifiedAccessInstanceWebAcl | Admin |
| ec2:AttachNetworkInterface | Admin |
| ec2:AttachVerifiedAccessTrustProvider | Admin |
| ec2:AttachVolume | Admin |
| ec2:BidEvictedEvent | Admin |
| ec2:CancelCapacityReservation | Admin |
| ec2:CancelCapacityReservationFleets | Admin |
| ec2:CancelReservedInstancesListing | Admin |
| ec2:CancelSpotFleetRequests | Admin |
| ec2:CancelSpotInstanceRequests | Admin |
| ec2:ConfirmProductInstance | Admin |
| ec2:CopyFpgaImage | Admin |
| ec2:CreateCapacityReservation | Admin |
| ec2:CreateCapacityReservationFleet | Admin |
| ec2:CreateCoipCidr | Admin |
| ec2:CreateCoipPool | Admin |
| ec2:CreateCoipPoolPermission | Admin |
| ec2:CreateFleet | Admin |
| ec2:CreateInstanceConnectEndpoint | Admin |
| ec2:CreateInstanceEventWindow | Admin |
| ec2:CreateIpamResourceDiscovery | Admin |
| ec2:CreateKeyPair | Admin |
| ec2:CreateLaunchTemplate | Admin |
| ec2:CreateLaunchTemplateVersion | Admin |
| ec2:CreateLocalGatewayRouteTable | Admin |
| ec2:CreateLocalGatewayRouteTablePermission | Admin |
| ec2:CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation | Admin |
| ec2:CreateManagedPrefixList | Admin |
| ec2:CreateNetworkInterface | Admin |
| ec2:CreateNetworkInterfacePermission | Admin |
| ec2:CreatePlacementGroup | Admin |
| ec2:CreateReplaceRootVolumeTask | Admin |
| ec2:CreateReservedInstancesListing | Admin |
| ec2:CreateRestoreImageTask | Admin |
| ec2:CreateSpotDatafeedSubscription | Admin |
| ec2:CreateStoreImageTask | Admin |
| ec2:CreateTransitGatewayPolicyTable | Admin |
| ec2:CreateTransitGatewayRouteTableAnnouncement | Admin |
| ec2:CreateVerifiedAccessEndpoint | Admin |
| ec2:CreateVerifiedAccessGroup | Admin |
| ec2:CreateVerifiedAccessInstance | Admin |
| ec2:CreateVerifiedAccessTrustProvider | Admin |
| ec2:CreateVolume | Admin |
| ec2:DeleteCoipCidr | Admin |
| ec2:DeleteCoipPool | Admin |
| ec2:DeleteCoipPoolPermission | Admin |
| ec2:DeleteFleets | Admin |
| ec2:DeleteFpgaImage | Admin |
| ec2:DeleteInstanceConnectEndpoint | Admin |
| ec2:DeleteInstanceEventWindow | Admin |
| ec2:DeleteIpamResourceDiscovery | Admin |
| ec2:DeleteKeyPair | Admin |
| ec2:DeleteLaunchTemplate | Admin |
| ec2:DeleteLaunchTemplateVersions | Admin |
| ec2:DeleteLocalGatewayRouteTable | Admin |
| ec2:DeleteLocalGatewayRouteTablePermission | Admin |
| ec2:DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation | Admin |
| ec2:DeleteManagedPrefixList | Admin |
| ec2:DeleteNetworkInterface | Admin |
| ec2:DeleteNetworkInterfacePermission | Admin |
| ec2:DeletePlacementGroup | Admin |
| ec2:DeleteQueuedReservedInstances | Admin |
| ec2:DeleteResourcePolicy | Admin |
| ec2:DeleteSnapshot | Admin |
| ec2:DeleteSpotDatafeedSubscription | Admin |
| ec2:DeleteTransitGatewayPolicyTable | Admin |
| ec2:DeleteTransitGatewayRouteTableAnnouncement | Admin |
| ec2:DeleteVerifiedAccessEndpoint | Admin |
| ec2:DeleteVerifiedAccessGroup | Admin |
| ec2:DeleteVerifiedAccessInstance | Admin |
| ec2:DeleteVerifiedAccessTrustProvider | Admin |
| ec2:DeleteVolume | Admin |
| ec2:DeprovisionIpamByoasn | Admin |
| ec2:DeregisterInstanceEventNotificationAttributes | Admin |
| ec2:DetachClassicLinkVpc | Admin |
| ec2:DetachNetworkInterface | Admin |
| ec2:DetachVerifiedAccessTrustProvider | Admin |
| ec2:DetachVolume | Admin |
| ec2:DisableAddressTransfer | Admin |
| ec2:DisableAwsNetworkPerformanceMetricSubscription | Admin |
| ec2:DisableEbsEncryptionByDefault | Admin |
| ec2:DisableFastLaunch | Admin |
| ec2:DisableFastSnapshotRestores | Admin |
| ec2:DisableImage | Admin |
| ec2:DisableImageBlockPublicAccess | Admin |
| ec2:DisableImageDeregistrationProtection | Admin |
| ec2:DisableImageDeprecation | Admin |
| ec2:DisableSerialConsoleAccess | Admin |
| ec2:DisableSnapshotBlockPublicAccess | Admin |
| ec2:DisassociateAddress | Admin |
| ec2:DisassociateEnclaveCertificateIamRole | Admin |
| ec2:DisassociateIamInstanceProfile | Admin |
| ec2:DisassociateInstanceEventWindow | Admin |
| ec2:DisassociateIpamByoasn | Admin |
| ec2:DisassociateIpamResourceDiscovery | Admin |
| ec2:DisassociateNatGatewayAddress | Admin |
| ec2:DisassociateTransitGatewayPolicyTable | Admin |
| ec2:DisassociateTrunkInterface | Admin |
| ec2:DisassociateVerifiedAccessInstanceWebAcl | Admin |
| ec2:EnableAddressTransfer | Admin |
| ec2:EnableAwsNetworkPerformanceMetricSubscription | Admin |
| ec2:EnableEbsEncryptionByDefault | Admin |
| ec2:EnableFastLaunch | Admin |
| ec2:EnableFastSnapshotRestores | Admin |
| ec2:EnableImage | Admin |
| ec2:EnableImageBlockPublicAccess | Admin |
| ec2:EnableImageDeregistrationProtection | Admin |
| ec2:EnableImageDeprecation | Admin |
| ec2:EnableReachabilityAnalyzerOrganizationSharing | Admin |
| ec2:EnableSerialConsoleAccess | Admin |
| ec2:EnableSnapshotBlockPublicAccess | Admin |
| ec2:EnableVolumeIO | Admin |
| ec2:GetPasswordData | Admin |
| ec2:ImportKeyPair | Admin |
| ec2:LockSnapshot | Admin |
| ec2:ModifyAvailabilityZoneGroup | Admin |
| ec2:ModifyCapacityReservation | Admin |
| ec2:ModifyCapacityReservationFleet | Admin |
| ec2:ModifyDefaultCreditSpecification | Admin |
| ec2:ModifyEbsDefaultKmsKeyId | Admin |
| ec2:ModifyFleet | Admin |
| ec2:ModifyFpgaImageAttribute | Admin |
| ec2:ModifyHosts | Admin |
| ec2:ModifyIdentityIdFormat | Admin |
| ec2:ModifyIdFormat | Admin |
| ec2:ModifyInstanceAttribute | Admin |
| ec2:ModifyInstanceCapacityReservationAttributes | Admin |
| ec2:ModifyInstanceCreditSpecification | Admin |
| ec2:ModifyInstanceEventStartTime | Admin |
| ec2:ModifyInstanceEventWindow | Admin |
| ec2:ModifyInstanceMaintenanceOptions | Admin |
| ec2:ModifyInstanceMetadataDefaults | Admin |
| ec2:ModifyInstanceMetadataOptions | Admin |
| ec2:ModifyInstancePlacement | Admin |
| ec2:ModifyIpamResourceDiscovery | Admin |
| ec2:ModifyLaunchTemplate | Admin |
| ec2:ModifyLocalGatewayRoute | Admin |
| ec2:ModifyNetworkInterfaceAttribute | Admin |
| ec2:ModifyPrivateDnsNameOptions | Admin |
| ec2:ModifyReservedInstances | Admin |
| ec2:ModifySnapshotAttribute | Admin |
| ec2:ModifySnapshotTier | Admin |
| ec2:ModifySpotFleetRequest | Admin |
| ec2:ModifyVerifiedAccessEndpoint | Admin |
| ec2:ModifyVerifiedAccessEndpointPolicy | Admin |
| ec2:ModifyVerifiedAccessGroup | Admin |
| ec2:ModifyVerifiedAccessGroupPolicy | Admin |
| ec2:ModifyVerifiedAccessInstance | Admin |
| ec2:ModifyVerifiedAccessInstanceLoggingConfiguration | Admin |
| ec2:ModifyVerifiedAccessTrustProvider | Admin |
| ec2:ModifyVolume | Admin |
| ec2:ModifyVolumeAttribute | Admin |
| ec2:ModifyVpcEndpointServicePayerResponsibility | Admin |
| ec2:MonitorInstances | Admin |
| ec2:MoveAddressToVpc | Admin |
| ec2:PauseVolumeIO | Admin |
| ec2:ProvisionIpamByoasn | Admin |
| ec2:PurchaseCapacityBlock | Admin |
| ec2:PurchaseHostReservation | Admin |
| ec2:PurchaseReservedInstancesOffering | Admin |
| ec2:PutResourcePolicy | Admin |
| ec2:RegisterInstanceEventNotificationAttributes | Admin |
| ec2:ReleaseAddress | Admin |
| ec2:ReleaseHosts | Admin |
| ec2:ReplaceIamInstanceProfileAssociation | Admin |
| ec2:RequestSpotFleet | Admin |
| ec2:RequestSpotInstances | Admin |
| ec2:ResetEbsDefaultKmsKeyId | Admin |
| ec2:ResetFpgaImageAttribute | Admin |
| ec2:ResetInstanceAttribute | Admin |
| ec2:ResetNetworkInterfaceAttribute | Admin |
| ec2:ResetSnapshotAttribute | Admin |
| ec2:RestoreAddressToClassic | Admin |
| ec2:RestoreImageFromRecycleBin | Admin |
| ec2:RestoreSnapshotFromRecycleBin | Admin |
| ec2:RestoreSnapshotTier | Admin |
| ec2:RunInstances | Admin |
| ec2:RunScheduledInstances | Admin |
| ec2:SendDiagnosticInterrupt | Admin |
| ec2:SendSpotInstanceInterruptions | Admin |
| ec2:TerminateInstances | Admin |
| ec2:UnassignIpv6Addresses | Admin |
| ec2:UnassignPrivateIpAddresses | Admin |
| ec2:UnassignPrivateNatGatewayAddress | Admin |
| ec2:UnlockSnapshot | Admin |
| ec2:UnmonitorInstances | Admin |
| elastic-inference:Connect | Admin |
| elasticloadbalancing:AddListenerCertificates | Admin |
| elasticloadbalancing:ApplySecurityGroupsToLoadBalancer | Admin |
| elasticloadbalancing:AttachLoadBalancerToSubnets | Admin |
| elasticloadbalancing:ConfigureHealthCheck | Admin |
| elasticloadbalancing:CreateAppCookieStickinessPolicy | Admin |
| elasticloadbalancing:CreateLBCookieStickinessPolicy | Admin |
| elasticloadbalancing:CreateListener | Admin |
| elasticloadbalancing:CreateLoadBalancer | Admin |
| elasticloadbalancing:CreateLoadBalancerListeners | Admin |
| elasticloadbalancing:CreateLoadBalancerListeners | Admin |
| elasticloadbalancing:CreateLoadBalancerPolicy | Admin |
| elasticloadbalancing:CreateRule | Admin |
| elasticloadbalancing:CreateTargetGroup | Admin |
| elasticloadbalancing:DeleteListener | Admin |
| elasticloadbalancing:DeleteLoadBalancer | Admin |
| elasticloadbalancing:DeleteLoadBalancerListeners | Admin |
| elasticloadbalancing:DeleteLoadBalancerPolicy | Admin |
| elasticloadbalancing:DeleteRule | Admin |
| elasticloadbalancing:DeleteTargetGroup | Admin |
| elasticloadbalancing:DetachLoadBalancerFromSubnets | Admin |
| elasticloadbalancing:DisableAvailabilityZonesForLoadBalancer | Admin |
| elasticloadbalancing:EnableAvailabilityZonesForLoadBalancer | Admin |
| elasticloadbalancing:ModifyListener | Admin |
| elasticloadbalancing:ModifyLoadBalancerAttributes | Admin |
| elasticloadbalancing:ModifyRule | Admin |
| elasticloadbalancing:ModifyTargetGroup | Admin |
| elasticloadbalancing:ModifyTargetGroupAttributes | Admin |
| elasticloadbalancing:RemoveListenerCertificates | Admin |
| elasticloadbalancing:SetIpAddressType | Admin |
| elasticloadbalancing:SetLoadBalancerListenerSSLCertificate | Admin |
| elasticloadbalancing:SetLoadBalancerListenerSSLCertificate | Admin |
| elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer | Admin |
| elasticloadbalancing:SetLoadBalancerPoliciesOfListener | Admin |
| elasticloadbalancing:SetLoadBalancerPoliciesOfListener | Admin |
| elasticloadbalancing:SetRulePriorities | Admin |
| elasticloadbalancing:SetSecurityGroups | Admin |
| elasticloadbalancing:SetSubnets | Admin |
| elasticloadbalancing:SetWebAcl | Admin |
| iam:PassRole | Admin |
| marketplacecommerceanalytics:GenerateDataSet | Admin |
| marketplacecommerceanalytics:StartSupportDataExport | Admin |
| application-autoscaling:DeregisterScalableTarget | Operator |
| application-autoscaling:RegisterScalableTarget | Operator |
| autoscaling-plans:UpdateScalingPlan | Operator |
| autoscaling:AttachInstances | Operator |
| autoscaling:AttachLoadBalancers | Operator |
| autoscaling:AttachLoadBalancerTargetGroups | Operator |
| autoscaling:CompleteLifecycleAction | Operator |
| autoscaling:CreateOrUpdateTags | Operator |
| autoscaling:DeleteNotificationConfiguration | Operator |
| autoscaling:DeleteTags | Operator |
| autoscaling:DetachInstances | Operator |
| autoscaling:DetachLoadBalancers | Operator |
| autoscaling:DetachLoadBalancerTargetGroups | Operator |
| autoscaling:DisableMetricsCollection | Operator |
| autoscaling:EnableMetricsCollection | Operator |
| autoscaling:EnterStandby | Operator |
| autoscaling:ExecutePolicy | Operator |
| autoscaling:ExitStandby | Operator |
| autoscaling:PutNotificationConfiguration | Operator |
| autoscaling:RecordLifecycleActionHeartbeat | Operator |
| autoscaling:ResumeProcesses | Operator |
| autoscaling:SetInstanceHealth | Operator |
| autoscaling:SetInstanceProtection | Operator |
| autoscaling:SuspendProcesses | Operator |
| autoscaling:TerminateInstanceInAutoScalingGroup | Operator |
| ec2:CopySnapshot | Operator |
| ec2:CreateSnapshot | Operator |
| ec2:CreateSnapshots | Operator |
| ec2:CreateTags | Operator |
| ec2:DeleteTags | Operator |
| ec2:ExportImage | Operator |
| ec2:RebootInstances | Operator |
| ec2:ReplaceVpnTunnel | Operator |
| ec2:ReportInstanceStatus | Operator |
| ec2:StartInstances | Operator |
| ec2:StopInstances | Operator |
| elasticloadbalancing:AddTags | Operator |
| elasticloadbalancing:DeregisterInstancesFromLoadBalancer | Operator |
| elasticloadbalancing:DeregisterTargets | Operator |
| elasticloadbalancing:RegisterInstancesWithLoadBalancer | Operator |
| elasticloadbalancing:RegisterTargets | Operator |
| elasticloadbalancing:RemoveTags | Operator |
| acm:ListCertificates | Metadata |
| application-autoscaling:DescribeScalableTargets | Metadata |
| application-autoscaling:DescribeScalingActivities | Metadata |
| application-autoscaling:DescribeScalingPolicies | Metadata |
| application-autoscaling:DescribeScheduledActions | Metadata |
| autoscaling-plans:DescribeScalingPlanResources | Metadata |
| autoscaling-plans:DescribeScalingPlans | Metadata |
| autoscaling-plans:GetScalingPlanResourceForecastData | Metadata |
| autoscaling:DescribeAccountLimits | Metadata |
| autoscaling:DescribeAdjustmentTypes | Metadata |
| autoscaling:DescribeAutoScalingGroups | Metadata |
| autoscaling:DescribeAutoScalingInstances | Metadata |
| autoscaling:DescribeAutoScalingNotificationTypes | Metadata |
| autoscaling:DescribeInstanceRefreshes | Metadata |
| autoscaling:DescribeLaunchConfigurations | Metadata |
| autoscaling:DescribeLifecycleHooks | Metadata |
| autoscaling:DescribeLifecycleHookTypes | Metadata |
| autoscaling:DescribeLoadBalancers | Metadata |
| autoscaling:DescribeLoadBalancerTargetGroups | Metadata |
| autoscaling:DescribeMetricCollectionTypes | Metadata |
| autoscaling:DescribeNotificationConfigurations | Metadata |
| autoscaling:DescribePolicies | Metadata |
| autoscaling:DescribeScalingActivities | Metadata |
| autoscaling:DescribeScalingPlanResources | Metadata |
| autoscaling:DescribeScalingPlans | Metadata |
| autoscaling:DescribeScalingProcessTypes | Metadata |
| autoscaling:DescribeScheduledActions | Metadata |
| autoscaling:DescribeTags | Metadata |
| autoscaling:DescribeTerminationPolicyTypes | Metadata |
| autoscaling:DescribeTriggers | Metadata |
| autoscaling:DescribeWarmPool | Metadata |
| aws-marketplace:GetEntitlements | Metadata |
| aws-marketplace:ViewSubscriptions | Metadata |
| cloudwatch:DescribeAlarmHistory | Metadata |
| cloudwatch:DescribeAlarms | Metadata |
| cloudwatch:DescribeAlarmsForMetric | Metadata |
| cloudwatch:GetMetricData | Metadata |
| cloudwatch:GetMetricStatistics | Metadata |
| cloudwatch:ListMetrics | Metadata |
| ec2:DescribeAccountAttributes | Metadata |
| ec2:DescribeAddresses | Metadata |
| ec2:DescribeAddressesAttribute | Metadata |
| ec2:DescribeAddressTransfers | Metadata |
| ec2:DescribeAvailabilityZones | Metadata |
| ec2:DescribeAwsNetworkPerformanceMetricSubscriptions | Metadata |
| ec2:DescribeBundleTasks | Metadata |
| ec2:DescribeCapacityBlockOfferings | Metadata |
| ec2:DescribeCapacityReservationFleets | Metadata |
| ec2:DescribeCapacityReservations | Metadata |
| ec2:DescribeCarrierGateways | Metadata |
| ec2:DescribeClassicLinkInstances | Metadata |
| ec2:DescribeConversionTasks | Metadata |
| ec2:DescribeElasticGpus | Metadata |
| ec2:DescribeExportImageTasks | Metadata |
| ec2:DescribeExportTasks | Metadata |
| ec2:DescribeFastLaunchImages | Metadata |
| ec2:DescribeFastSnapshotRestores | Metadata |
| ec2:DescribeFleetHistory | Metadata |
| ec2:DescribeFleetInstances | Metadata |
| ec2:DescribeFleets | Metadata |
| ec2:DescribeFpgaImageAttribute | Metadata |
| ec2:DescribeFpgaImages | Metadata |
| ec2:DescribeHostReservationOfferings | Metadata |
| ec2:DescribeHostReservations | Metadata |
| ec2:DescribeHosts | Metadata |
| ec2:DescribeIamInstanceProfileAssociations | Metadata |
| ec2:DescribeIdentityIdFormat | Metadata |
| ec2:DescribeIdFormat | Metadata |
| ec2:DescribeImageAttribute | Metadata |
| ec2:DescribeImages | Metadata |
| ec2:DescribeImportImageTasks | Metadata |
| ec2:DescribeImportSnapshotTasks | Metadata |
| ec2:DescribeInstanceAttribute | Metadata |
| ec2:DescribeInstanceConnectEndpoints | Metadata |
| ec2:DescribeInstanceCreditSpecifications | Metadata |
| ec2:DescribeInstanceEventNotificationAttributes | Metadata |
| ec2:DescribeInstanceEventWindows | Metadata |
| ec2:DescribeInstances | Metadata |
| ec2:DescribeInstanceStatus | Metadata |
| ec2:DescribeInstanceTopology | Metadata |
| ec2:DescribeInstanceTypeOfferings | Metadata |
| ec2:DescribeInstanceTypes | Metadata |
| ec2:DescribeIpamByoasn | Metadata |
| ec2:DescribeIpamResourceDiscoveries | Metadata |
| ec2:DescribeIpamResourceDiscoveryAssociations | Metadata |
| ec2:DescribeIpv6Pools | Metadata |
| ec2:DescribeKeyPairs | Metadata |
| ec2:DescribeLaunchTemplates | Metadata |
| ec2:DescribeLaunchTemplateVersions | Metadata |
| ec2:DescribeLicenses | Metadata |
| ec2:DescribeLocalGatewayRouteTablePermissions | Metadata |
| ec2:DescribeLockedSnapshots | Metadata |
| ec2:DescribeMovingAddresses | Metadata |
| ec2:DescribeNetworkInterfaceAttribute | Metadata |
| ec2:DescribeNetworkInterfacePermissions | Metadata |
| ec2:DescribeNetworkInterfaces | Metadata |
| ec2:DescribePlacementGroups | Metadata |
| ec2:DescribePublicIpv4Pools | Metadata |
| ec2:DescribeRegions | Metadata |
| ec2:DescribeReplaceRootVolumeTasks | Metadata |
| ec2:DescribeReservedInstances | Metadata |
| ec2:DescribeReservedInstancesListings | Metadata |
| ec2:DescribeReservedInstancesModifications | Metadata |
| ec2:DescribeReservedInstancesOfferings | Metadata |
| ec2:DescribeScheduledInstanceAvailability | Metadata |
| ec2:DescribeScheduledInstances | Metadata |
| ec2:DescribeSecurityGroupReferences | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSnapshotAttribute | Metadata |
| ec2:DescribeSnapshots | Metadata |
| ec2:DescribeSnapshotTierStatus | Metadata |
| ec2:DescribeSpotDatafeedSubscription | Metadata |
| ec2:DescribeSpotFleetInstances | Metadata |
| ec2:DescribeSpotFleetRequestHistory | Metadata |
| ec2:DescribeSpotFleetRequests | Metadata |
| ec2:DescribeSpotInstanceRequests | Metadata |
| ec2:DescribeSpotPriceHistory | Metadata |
| ec2:DescribeStaleSecurityGroups | Metadata |
| ec2:DescribeStoreImageTasks | Metadata |
| ec2:DescribeTags | Metadata |
| ec2:DescribeTransitGatewayPolicyTables | Metadata |
| ec2:DescribeTransitGatewayRouteTableAnnouncements | Metadata |
| ec2:DescribeVerifiedAccessEndpoints | Metadata |
| ec2:DescribeVerifiedAccessGroups | Metadata |
| ec2:DescribeVerifiedAccessInstanceLoggingConfigurations | Metadata |
| ec2:DescribeVerifiedAccessInstances | Metadata |
| ec2:DescribeVerifiedAccessInstanceWebAclAssociations | Metadata |
| ec2:DescribeVerifiedAccessTrustProviders | Metadata |
| ec2:DescribeVolumeAttribute | Metadata |
| ec2:DescribeVolumes | Metadata |
| ec2:DescribeVolumesModifications | Metadata |
| ec2:DescribeVolumeStatus | Metadata |
| ec2:GetAssociatedEnclaveCertificateIamRoles | Metadata |
| ec2:GetAwsNetworkPerformanceData | Metadata |
| ec2:GetCapacityReservationUsage | Metadata |
| ec2:GetConsoleOutput | Metadata |
| ec2:GetConsoleScreenshot | Metadata |
| ec2:GetDefaultCreditSpecification | Metadata |
| ec2:GetEbsDefaultKmsKeyId | Metadata |
| ec2:GetEbsEncryptionByDefault | Metadata |
| ec2:GetGroupsForCapacityReservation | Metadata |
| ec2:GetHostReservationPurchasePreview | Metadata |
| ec2:GetImageBlockPublicAccessState | Metadata |
| ec2:GetInstanceTypesFromInstanceRequirements | Metadata |
| ec2:GetInstanceUefiData | Metadata |
| ec2:GetIpamDiscoveredAccounts | Metadata |
| ec2:GetIpamDiscoveredPublicAddresses | Metadata |
| ec2:GetIpamDiscoveredResourceCidrs | Metadata |
| ec2:GetLaunchTemplateData | Metadata |
| ec2:GetReservedInstancesExchangeQuote | Metadata |
| ec2:GetResourcePolicy | Metadata |
| ec2:GetSecurityGroupsForVpc | Metadata |
| ec2:GetSerialConsoleAccessStatus | Metadata |
| ec2:GetSnapshotBlockPublicAccessState | Metadata |
| ec2:GetSpotPlacementScores | Metadata |
| ec2:GetTransitGatewayPolicyTableAssociations | Metadata |
| ec2:GetTransitGatewayPolicyTableEntries | Metadata |
| ec2:GetVerifiedAccessEndpointPolicy | Metadata |
| ec2:GetVerifiedAccessGroupPolicy | Metadata |
| ec2:GetVerifiedAccessInstanceWebAcl | Metadata |
| ec2:GetVpnTunnelReplacementStatus | Metadata |
| ec2:ListImagesInRecycleBin | Metadata |
| ec2:ListSnapshotsInRecycleBin | Metadata |
| elasticloadbalancing:DescribeAccountLimits | Metadata |
| elasticloadbalancing:DescribeInstanceHealth | Metadata |
| elasticloadbalancing:DescribeListenerCertificates | Metadata |
| elasticloadbalancing:DescribeListeners | Metadata |
| elasticloadbalancing:DescribeLoadBalancerAttributes | Metadata |
| elasticloadbalancing:DescribeLoadBalancerPolicies | Metadata |
| elasticloadbalancing:DescribeLoadBalancerPolicyTypes | Metadata |
| elasticloadbalancing:DescribeLoadBalancers | Metadata |
| elasticloadbalancing:DescribeRules | Metadata |
| elasticloadbalancing:DescribeSSLPolicies | Metadata |
| elasticloadbalancing:DescribeTags | Metadata |
| elasticloadbalancing:DescribeTargetGroupAttributes | Metadata |
| elasticloadbalancing:DescribeTargetGroups | Metadata |
| elasticloadbalancing:DescribeTargetHealth | Metadata |
| health:DescribeEventAggregates | Metadata |
| kms:ListAliases | Metadata |
