| elasticmapreduce:AddInstanceFleet | Admin |
| elasticmapreduce:AddInstanceGroups | Admin |
| elasticmapreduce:AddJobFlowSteps | Admin |
| elasticmapreduce:AddTags | Admin |
| elasticmapreduce:AttachEditor | Admin |
| elasticmapreduce:CancelSteps | Admin |
| elasticmapreduce:CreateEditor | Admin |
| elasticmapreduce:CreatePersistentAppUI | Admin |
| elasticmapreduce:CreateRepository | Admin |
| elasticmapreduce:CreateStudio | Admin |
| elasticmapreduce:CreateStudioPresignedUrl | Admin |
| elasticmapreduce:CreateStudioSessionMapping | Admin |
| elasticmapreduce:DeleteEditor | Admin |
| elasticmapreduce:DeleteRepository | Admin |
| elasticmapreduce:DeleteStudio | Admin |
| elasticmapreduce:DeleteStudioSessionMapping | Admin |
| elasticmapreduce:DetachEditor | Admin |
| elasticmapreduce:LinkRepository | Admin |
| elasticmapreduce:ModifyCluster | Admin |
| elasticmapreduce:ModifyInstanceFleet | Admin |
| elasticmapreduce:ModifyInstanceGroups | Admin |
| elasticmapreduce:OpenEditorInConsole | Admin |
| elasticmapreduce:PutAutoScalingPolicy | Admin |
| elasticmapreduce:PutAutoTerminationPolicy | Admin |
| elasticmapreduce:PutBlockPublicAccessConfiguration | Admin |
| elasticmapreduce:PutManagedScalingPolicy | Admin |
| elasticmapreduce:RemoveAutoScalingPolicy | Admin |
| elasticmapreduce:RemoveAutoTerminationPolicy | Admin |
| elasticmapreduce:RemoveManagedScalingPolicy | Admin |
| elasticmapreduce:RemoveTags | Admin |
| elasticmapreduce:RunJobFlow | Admin |
| elasticmapreduce:SetTerminationProtection | Admin |
| elasticmapreduce:SetVisibleToAllUsers | Admin |
| elasticmapreduce:StartEditor | Admin |
| elasticmapreduce:StartNotebookExecution | Admin |
| elasticmapreduce:StopEditor | Admin |
| elasticmapreduce:StopNotebookExecution | Admin |
| elasticmapreduce:TerminateJobFlows | Admin |
| elasticmapreduce:UnlinkRepository | Admin |
| elasticmapreduce:UpdateRepository | Admin |
| elasticmapreduce:UpdateStudio | Admin |
| elasticmapreduce:UpdateStudioSessionMapping | Admin |
| iam:PassRole | Admin |
| elasticmapreduce:CreateSecurityConfiguration | Operator |
| elasticmapreduce:DeleteSecurityConfiguration | Operator |
| s3:GetObject | Operator |
| sdb:Select | Operator |
| cloudwatch:GetMetricStatistics | Metadata |
| ec2:DescribeAccountAttributes | Metadata |
| ec2:DescribeAddresses | Metadata |
| ec2:DescribeAvailabilityZones | Metadata |
| ec2:DescribeBundleTasks | Metadata |
| ec2:DescribeConversionTasks | Metadata |
| ec2:DescribeCustomerGateways | Metadata |
| ec2:DescribeDhcpOptions | Metadata |
| ec2:DescribeExportTasks | Metadata |
| ec2:DescribeImageAttribute | Metadata |
| ec2:DescribeImages | Metadata |
| ec2:DescribeInstanceAttribute | Metadata |
| ec2:DescribeInstanceStatus | Metadata |
| ec2:DescribeInstances | Metadata |
| ec2:DescribeInternetGateways | Metadata |
| ec2:DescribeKeyPairs | Metadata |
| ec2:DescribeLicenses | Metadata |
| ec2:DescribeNetworkAcls | Metadata |
| ec2:DescribeNetworkInterfaceAttribute | Metadata |
| ec2:DescribeNetworkInterfaces | Metadata |
| ec2:DescribePlacementGroups | Metadata |
| ec2:DescribeRegions | Metadata |
| ec2:DescribeReservedInstances | Metadata |
| ec2:DescribeReservedInstancesListings | Metadata |
| ec2:DescribeReservedInstancesModifications | Metadata |
| ec2:DescribeReservedInstancesOfferings | Metadata |
| ec2:DescribeRouteTables | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSnapshotAttribute | Metadata |
| ec2:DescribeSnapshots | Metadata |
| ec2:DescribeSpotDatafeedSubscription | Metadata |
| ec2:DescribeSpotInstanceRequests | Metadata |
| ec2:DescribeSpotPriceHistory | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeTags | Metadata |
| ec2:DescribeVolumeAttribute | Metadata |
| ec2:DescribeVolumeStatus | Metadata |
| ec2:DescribeVolumes | Metadata |
| ec2:DescribeVpcAttribute | Metadata |
| ec2:DescribeVpcPeeringConnection | Metadata |
| ec2:DescribeVpcs | Metadata |
| ec2:DescribeVpnConnections | Metadata |
| ec2:DescribeVpnGateways | Metadata |
| elasticmapreduce:DescribeCluster | Metadata |
| elasticmapreduce:DescribeEditor | Metadata |
| elasticmapreduce:DescribeJobFlows | Metadata |
| elasticmapreduce:DescribeNotebookExecution | Metadata |
| elasticmapreduce:DescribePersistentAppUI | Metadata |
| elasticmapreduce:DescribeReleaseLabel | Metadata |
| elasticmapreduce:DescribeRepository | Metadata |
| elasticmapreduce:DescribeSecurityConfiguration | Metadata |
| elasticmapreduce:DescribeStep | Metadata |
| elasticmapreduce:DescribeStudio | Metadata |
| elasticmapreduce:GetAutoTerminationPolicy | Metadata |
| elasticmapreduce:GetBlockPublicAccessConfiguration | Metadata |
| elasticmapreduce:GetManagedScalingPolicy | Metadata |
| elasticmapreduce:GetOnClusterAppUIPresignedURL | Metadata |
| elasticmapreduce:GetPersistentAppUIPresignedURL | Metadata |
| elasticmapreduce:GetStudioSessionMapping | Metadata |
| elasticmapreduce:ListBootstrapActions | Metadata |
| elasticmapreduce:ListClusters | Metadata |
| elasticmapreduce:ListEditors | Metadata |
| elasticmapreduce:ListInstanceFleets | Metadata |
| elasticmapreduce:ListInstanceGroups | Metadata |
| elasticmapreduce:ListInstances | Metadata |
| elasticmapreduce:ListNotebookExecutions | Metadata |
| elasticmapreduce:ListReleaseLabels | Metadata |
| elasticmapreduce:ListRepositories | Metadata |
| elasticmapreduce:ListSecurityConfigurations | Metadata |
| elasticmapreduce:ListSteps | Metadata |
| elasticmapreduce:ListStudioSessionMappings | Metadata |
| elasticmapreduce:ListStudios | Metadata |
| elasticmapreduce:ViewEventsFromAllClustersInConsole | Metadata |
| iam:ListAccessKeys | Metadata |
| iam:ListAccountAliases | Metadata |
| iam:ListGroupPolicies | Metadata |
| iam:ListGroups | Metadata |
| iam:ListGroupsForUser | Metadata |
| iam:ListInstanceProfiles | Metadata |
| iam:ListInstanceProfilesForRole | Metadata |
| iam:ListMFADevices | Metadata |
| iam:ListRolePolicies | Metadata |
| iam:ListRoles | Metadata |
| iam:ListSAMLProviders | Metadata |
| iam:ListServerCertificates | Metadata |
| iam:ListSigningCertificates | Metadata |
| iam:ListUserPolicies | Metadata |
| iam:ListUsers | Metadata |
| iam:ListVirtualMFADevices | Metadata |
| s3:ListAllMyBuckets | Metadata |
| s3:ListBucket | Metadata |
