| signer:AddProfilePermission | Admin |
| signer:CancelSigningProfile | Admin |
| signer:PutSigningProfile | Admin |
| signer:RemoveProfilePermission | Admin |
| signer:RevokeSignature | Admin |
| signer:RevokeSigningProfile | Admin |
| signer:StartSigningJob | Admin |
| signer:TagResource | Operator |
| signer:UntagResource | Operator |
| s3:GetObjectVersion | Metadata |
| s3:ListAllMyBuckets | Metadata |
| s3:ListBucket | Metadata |
| signer:DescribeSigningJob | Metadata |
| signer:GetSigningPlatform | Metadata |
| signer:GetSigningProfile | Metadata |
| signer:ListProfilePermissions | Metadata |
| signer:ListSigningJobs | Metadata |
| signer:ListSigningPlatforms | Metadata |
| signer:ListSigningProfiles | Metadata |
| signer:ListTagsForResource | Metadata |
