| access-analyzer:TagResource | Operator |
| access-analyzer:UntagResource | Operator |
| access-analyzer:ValidatePolicy | Operator |
| iam:TagInstanceProfile | Operator |
| iam:TagMFADevice | Operator |
| iam:TagOpenIDConnectProvider | Operator |
| iam:TagPolicy | Operator |
| iam:TagRole | Operator |
| iam:TagSAMLProvider | Operator |
| iam:TagServerCertificate | Operator |
| iam:TagUser | Operator |
| iam:UntagInstanceProfile | Operator |
| iam:UntagMFADevice | Operator |
| iam:UntagOpenIDConnectProvider | Operator |
| iam:UntagPolicy | Operator |
| iam:UntagRole | Operator |
| iam:UntagSAMLProvider | Operator |
| iam:UntagServerCertificate | Operator |
| iam:UntagUser | Operator |
| sts:AssumeRole | Operator |
| sts:AssumeRoleWithSAML | Operator |
| sts:AssumeRoleWithWebIdentity | Operator |
| access-analyzer:GetAccessPreview | Metadata |
| access-analyzer:GetAnalyzedResource | Metadata |
| access-analyzer:GetAnalyzer | Metadata |
| access-analyzer:GetArchiveRule | Metadata |
| access-analyzer:GetFinding | Metadata |
| access-analyzer:GetGeneratedPolicy | Metadata |
| access-analyzer:ListAccessPreviewFindings | Metadata |
| access-analyzer:ListAccessPreviews | Metadata |
| access-analyzer:ListAnalyzedResources | Metadata |
| access-analyzer:ListAnalyzers | Metadata |
| access-analyzer:ListArchiveRules | Metadata |
| access-analyzer:ListFindings | Metadata |
| access-analyzer:ListPolicyGenerations | Metadata |
| access-analyzer:ListTagsForResource | Metadata |
| iam:GenerateCredentialReport | Metadata |
| iam:GenerateServiceLastAccessedDetails | Metadata |
| iam:GetAccessKeyLastUsed | Metadata |
| iam:GetAccountAuthorizationDetails | Metadata |
| iam:GetAccountPasswordPolicy | Metadata |
| iam:GetAccountSummary | Metadata |
| iam:GetContextKeysForCustomPolicy | Metadata |
| iam:GetContextKeysForPrincipalPolicy | Metadata |
| iam:GetCredentialReport | Metadata |
| iam:GetGroup | Metadata |
| iam:GetGroupPolicy | Metadata |
| iam:GetInstanceProfile | Metadata |
| iam:GetLoginProfile | Metadata |
| iam:GetOpenIDConnectProvider | Metadata |
| iam:GetOrganizationsAccessReport | Metadata |
| iam:GetPolicy | Metadata |
| iam:GetPolicyVersion | Metadata |
| iam:GetRole | Metadata |
| iam:GetRolePolicy | Metadata |
| iam:GetSAMLProvider | Metadata |
| iam:GetSSHPublicKey | Metadata |
| iam:GetServerCertificate | Metadata |
| iam:GetServiceLastAccessedDetails | Metadata |
| iam:GetServiceLastAccessedDetailsWithEntities | Metadata |
| iam:GetServiceLinkedRoleDeletionStatus | Metadata |
| iam:GetUser | Metadata |
| iam:GetUserPolicy | Metadata |
| iam:ListAccessKeys | Metadata |
| iam:ListAccountAliases | Metadata |
| iam:ListAttachedGroupPolicies | Metadata |
| iam:ListAttachedRolePolicies | Metadata |
| iam:ListAttachedUserPolicies | Metadata |
| iam:ListEntitiesForPolicy | Metadata |
| iam:ListGroupPolicies | Metadata |
| iam:ListGroups | Metadata |
| iam:ListGroupsForUser | Metadata |
| iam:ListInstanceProfileTags | Metadata |
| iam:ListInstanceProfiles | Metadata |
| iam:ListInstanceProfilesForRole | Metadata |
| iam:ListMFADeviceTags | Metadata |
| iam:ListMFADevices | Metadata |
| iam:ListOpenIDConnectProviderTags | Metadata |
| iam:ListOpenIDConnectProviders | Metadata |
| iam:ListPolicies | Metadata |
| iam:ListPoliciesGrantingServiceAccess | Metadata |
| iam:ListPolicyTags | Metadata |
| iam:ListPolicyVersions | Metadata |
| iam:ListRolePolicies | Metadata |
| iam:ListRoleTags | Metadata |
| iam:ListRoles | Metadata |
| iam:ListSAMLProviderTags | Metadata |
| iam:ListSAMLProviders | Metadata |
| iam:ListSSHPublicKeys | Metadata |
| iam:ListServerCertificateTags | Metadata |
| iam:ListServerCertificates | Metadata |
| iam:ListServiceSpecificCredentials | Metadata |
| iam:ListSigningCertificates | Metadata |
| iam:ListUserPolicies | Metadata |
| iam:ListUserTags | Metadata |
| iam:ListUsers | Metadata |
| iam:ListVirtualMFADevices | Metadata |
| iam:SimulateCustomPolicy | Metadata |
| iam:SimulatePrincipalPolicy | Metadata |
| organizations:DescribeOrganization | Metadata |
| sts:DecodeAuthorizationMessage | Metadata |
