| kafka:CreateCluster | Admin |
| kafka:CreateClusterV2 | Admin |
| kafka:CreateConfiguration | Admin |
| kafka:CreateVpcConnection | Admin |
| kafka:DeleteCluster | Admin |
| kafka:DeleteClusterPolicy | Admin |
| kafka:DeleteConfiguration | Admin |
| kafka:DeleteVpcConnection | Admin |
| kafka:PutClusterPolicy | Admin |
| kafka:RebootBroker | Admin |
| kafka:RejectClientVpcConnection | Admin |
| kafka:TagResource | Admin |
| kafka:UntagResource | Admin |
| kafka:UpdateBrokerCount | Admin |
| kafka:UpdateBrokerStorage | Admin |
| kafka:UpdateBrokerType | Admin |
| kafka:UpdateClusterConfiguration | Admin |
| kafka:UpdateClusterKafkaVersion | Admin |
| kafka:UpdateConfiguration | Admin |
| kafka:UpdateConnectivity | Admin |
| kafka:UpdateMonitoring | Admin |
| kafka:UpdateSecurity | Admin |
| kafka:UpdateStorage | Admin |
| kafka:BatchAssociateScramSecret | Operator |
| kafka:BatchDisassociateScramSecret | Operator |
| ec2:DescribeAvailabilityZones | Metadata |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeVpcs | Metadata |
| health:DescribeEventAggregates | Metadata |
| kafka:DescribeCluster | Metadata |
| kafka:DescribeClusterOperation | Metadata |
| kafka:DescribeClusterOperationV2 | Metadata |
| kafka:DescribeClusterV2 | Metadata |
| kafka:DescribeConfiguration | Metadata |
| kafka:DescribeConfigurationRevision | Metadata |
| kafka:DescribeVpcConnection | Metadata |
| kafka:GetBootstrapBrokers | Metadata |
| kafka:GetClusterPolicy | Metadata |
| kafka:GetCompatibleKafkaVersions | Metadata |
| kafka:ListClientVpcConnections | Metadata |
| kafka:ListClusterOperations | Metadata |
| kafka:ListClusterOperationsV2 | Metadata |
| kafka:ListClusters | Metadata |
| kafka:ListClustersV2 | Metadata |
| kafka:ListConfigurationRevisions | Metadata |
| kafka:ListConfigurations | Metadata |
| kafka:ListKafkaVersions | Metadata |
| kafka:ListNodes | Metadata |
| kafka:ListScramSecrets | Metadata |
| kafka:ListTagsForResource | Metadata |
| kafka:ListVpcConnections | Metadata |
| kms:DescribeKey | Metadata |
