| logs:CancelExportTask | Operator |
| logs:CreateExportTask | Operator |
| logs:CreateLogStream | Operator |
| logs:DeleteMetricFilter | Operator |
| logs:PutLogEvents | Operator |
| logs:PutMetricFilter | Operator |
| logs:StartQuery | Operator |
| logs:StopQuery | Operator |
| logs:TagLogGroup | Operator |
| logs:TagResource | Operator |
| logs:TestMetricFilter | Operator |
| logs:UntagLogGroup | Operator |
| logs:UntagResource | Operator |
| logs:FilterLogEvents | ReadOnly |
| logs:GetLogEvents | ReadOnly |
| logs:DescribeAccountPolicies | Metadata |
| logs:DescribeDeliveries | Metadata |
| logs:DescribeDeliveryDestinations | Metadata |
| logs:DescribeDeliverySources | Metadata |
| logs:DescribeDestinations | Metadata |
| logs:DescribeExportTasks | Metadata |
| logs:DescribeLogGroups | Metadata |
| logs:DescribeLogStreams | Metadata |
| logs:DescribeMetricFilters | Metadata |
| logs:DescribeQueries | Metadata |
| logs:DescribeQueryDefinitions | Metadata |
| logs:DescribeResourcePolicies | Metadata |
| logs:DescribeSubscriptionFilters | Metadata |
| logs:GetDataProtectionPolicy | Metadata |
| logs:GetDelivery | Metadata |
| logs:GetDeliveryDestination | Metadata |
| logs:GetDeliveryDestinationPolicy | Metadata |
| logs:GetDeliverySource | Metadata |
| logs:GetLogAnomalyDetector | Metadata |
| logs:GetLogGroupFields | Metadata |
| logs:GetLogRecord | Metadata |
| logs:GetQueryResults | Metadata |
| logs:Link | Metadata |
| logs:ListAnomalies | Metadata |
| logs:ListLogAnomalyDetectors | Metadata |
| logs:ListTagsForResource | Metadata |
| logs:ListTagsLogGroup | Metadata |
