| fsx:CreateBackup | Admin |
| fsx:CreateFileSystem | Admin |
| fsx:CreateFileSystemFromBackup | Admin |
| fsx:DeleteBackup | Admin |
| fsx:DeleteFileSystem | Admin |
| fsx:TagResource | Admin |
| fsx:UntagResource | Admin |
| fsx:UpdateFileSystem | Admin |
| iam:PassRole | Admin |
| ds:DescribeDirectories | Metadata |
| ec2:DescribeNetworkInterfaceAttribute | Metadata |
| ec2:DescribeNetworkInterfaces | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeVpcs | Metadata |
| fsx:DescribeBackups | Metadata |
| fsx:DescribeFileSystems | Metadata |
| fsx:ListTagsForResource | Metadata |
| iam:GetRole | Metadata |
| iam:ListRoles | Metadata |
| kms:DescribeKey | Metadata |
| kms:ListAliases | Metadata |
| s3:HeadBucket | Metadata |
