IAM Role: AWS/Transfer for SFTP/Admin
| Permission | Grant |
|---|
| iam:PassRole | Admin |
| transfer:CreateServer | Admin |
| transfer:CreateUser | Admin |
| transfer:DeleteServer | Admin |
| transfer:DeleteSshPublicKey | Admin |
| transfer:DeleteUser | Admin |
| transfer:ImportSshPublicKey | Admin |
| transfer:UpdateServer | Admin |
| transfer:UpdateUser | Admin |
| transfer:StartServer | Operator |
| transfer:StopServer | Operator |
| transfer:TagResource | Operator |
| transfer:UntagResource | Operator |
| iam:ListPolicies | Metadata |
| iam:ListRoles | Metadata |
| s3:ListAllMyBuckets | Metadata |
| transfer:DescribeServer | Metadata |
| transfer:DescribeUser | Metadata |
| transfer:ListServers | Metadata |
| transfer:ListTagsForResource | Metadata |
| transfer:ListUsers | Metadata |