| macie2:AcceptInvitation | Admin |
| macie2:CreateClassificationJob | Admin |
| macie2:CreateCustomDataIdentifier | Admin |
| macie2:CreateFindingsFilter | Admin |
| macie2:CreateInvitations | Admin |
| macie2:CreateMember | Admin |
| macie2:CreateSampleFindings | Admin |
| macie2:DeclineInvitations | Admin |
| macie2:DeleteCustomDataIdentifier | Admin |
| macie2:DeleteFindingsFilter | Admin |
| macie2:DeleteInvitations | Admin |
| macie2:DeleteMember | Admin |
| macie2:DisableMacie | Admin |
| macie2:DisableOrganizationAdminAccount | Admin |
| macie2:DisassociateFromMasterAccount | Admin |
| macie2:DisassociateMember | Admin |
| macie2:EnableMacie | Admin |
| macie2:EnableOrganizationAdminAccount | Admin |
| macie2:PutClassificationExportConfiguration | Admin |
| macie2:TestCustomDataIdentifier | Admin |
| macie2:UpdateClassificationJob | Admin |
| macie2:UpdateFindingsFilter | Admin |
| macie2:UpdateMacieSession | Admin |
| macie2:UpdateMemberSession | Admin |
| macie2:UpdateOrganizationConfiguration | Admin |
| macie:AssociateMemberAccount | Admin |
| macie:CreateMacieAccount | Admin |
| macie:DisassociateMemberAccount | Admin |
| macie2:TagResource | Operator |
| macie2:UntagResource | Operator |
| macie:AssociateS3Resources | Operator |
| macie:DisassociateS3Resources | Operator |
| macie:UpdateS3Resources | Operator |
| kms:ListAliases | Metadata |
| macie2:BatchGetCustomDataIdentifiers | Metadata |
| macie2:DescribeBuckets | Metadata |
| macie2:DescribeClassificationJob | Metadata |
| macie2:DescribeOrganizationConfiguration | Metadata |
| macie2:GetBucketStatistics | Metadata |
| macie2:GetClassificationExportConfiguration | Metadata |
| macie2:GetCustomDataIdentifier | Metadata |
| macie2:GetFindingStatistics | Metadata |
| macie2:GetFindings | Metadata |
| macie2:GetFindingsFilter | Metadata |
| macie2:GetInvitationsCount | Metadata |
| macie2:GetMacieSession | Metadata |
| macie2:GetMasterAccount | Metadata |
| macie2:GetMember | Metadata |
| macie2:GetUsageStatistics | Metadata |
| macie2:GetUsageTotals | Metadata |
| macie2:ListClassificationJobs | Metadata |
| macie2:ListCustomDataIdentifiers | Metadata |
| macie2:ListFindings | Metadata |
| macie2:ListFindingsFilters | Metadata |
| macie2:ListInvitations | Metadata |
| macie2:ListMembers | Metadata |
| macie2:ListOrganizationAdminAccounts | Metadata |
| macie2:ListTagsForResource | Metadata |
| macie:DescribeMacieAccountDetails | Metadata |
| macie:GetIdentityDetails | Metadata |
| macie:ListMemberAccounts | Metadata |
| macie:ListS3Resources | Metadata |
| organizations:DescribeOrganization | Metadata |
| s3:GetBucketLocation | Metadata |
| s3:ListAllMyBuckets | Metadata |
