| macie2:TagResource | Operator |
| macie2:UntagResource | Operator |
| macie:AssociateS3Resources | Operator |
| macie:DisassociateS3Resources | Operator |
| macie:UpdateS3Resources | Operator |
| kms:ListAliases | Metadata |
| macie2:BatchGetCustomDataIdentifiers | Metadata |
| macie2:DescribeBuckets | Metadata |
| macie2:DescribeClassificationJob | Metadata |
| macie2:DescribeOrganizationConfiguration | Metadata |
| macie2:GetBucketStatistics | Metadata |
| macie2:GetClassificationExportConfiguration | Metadata |
| macie2:GetCustomDataIdentifier | Metadata |
| macie2:GetFindingStatistics | Metadata |
| macie2:GetFindings | Metadata |
| macie2:GetFindingsFilter | Metadata |
| macie2:GetInvitationsCount | Metadata |
| macie2:GetMacieSession | Metadata |
| macie2:GetMasterAccount | Metadata |
| macie2:GetMember | Metadata |
| macie2:GetUsageStatistics | Metadata |
| macie2:GetUsageTotals | Metadata |
| macie2:ListClassificationJobs | Metadata |
| macie2:ListCustomDataIdentifiers | Metadata |
| macie2:ListFindings | Metadata |
| macie2:ListFindingsFilters | Metadata |
| macie2:ListInvitations | Metadata |
| macie2:ListMembers | Metadata |
| macie2:ListOrganizationAdminAccounts | Metadata |
| macie2:ListTagsForResource | Metadata |
| macie:DescribeMacieAccountDetails | Metadata |
| macie:GetIdentityDetails | Metadata |
| macie:ListMemberAccounts | Metadata |
| macie:ListS3Resources | Metadata |
| organizations:DescribeOrganization | Metadata |
| s3:GetBucketLocation | Metadata |
| s3:ListAllMyBuckets | Metadata |
