AWS managed policy: AmazonDataZoneDomainExecutionRolePolicy

This is the default policy for the Amazon DataZone DomainExecutionRole service role. This role is used by Amazon DataZone to catalog, discover, govern, share, and analyze data in the Amazon DataZone domain. This role provides access to all Amazon DataZone APIs that are required for data portal use, as well as RAM permissions to support usage of associated accounts in a Amazon DataZone domain.

You can attach the AmazonDataZoneDomainExecutionRolePolicy policy to your AmazonDataZoneDomainExecutionRole.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "DomainExecutionRoleStatement",
			"Effect": "Allow",
			"Action": [
				"datazone:AcceptPredictions",
				"datazone:AcceptSubscriptionRequest",
				"datazone:AddEntityOwner",
				"datazone:AddPolicyGrant",
				"datazone:CancelMetadataGenerationRun",
				"datazone:CancelSubscription",
				"datazone:CreateAsset",
				"datazone:CreateAssetFilter",
				"datazone:CreateAssetRevision",
				"datazone:CreateAssetType",
				"datazone:CreateDataProduct",
				"datazone:CreateDataProductRevision",
				"datazone:CreateDataSource",
				"datazone:CreateDomainUnit",
				"datazone:CreateEnvironment",
				"datazone:CreateEnvironmentBlueprint",
				"datazone:CreateEnvironmentProfile",
				"datazone:CreateFormType",
				"datazone:CreateGlossary",
				"datazone:CreateGlossaryTerm",
				"datazone:CreateListingChangeSet",
				"datazone:CreateProject",
				"datazone:CreateProjectMembership",
				"datazone:CreateRule",
				"datazone:CreateSubscriptionGrant",
				"datazone:CreateSubscriptionRequest",
				"datazone:DeleteAsset",
				"datazone:DeleteAssetFilter",
				"datazone:DeleteAssetType",
				"datazone:DeleteDataProduct",
				"datazone:DeleteDataSource",
				"datazone:DeleteDomainUnit",
				"datazone:DeleteEnvironment",
				"datazone:DeleteEnvironmentBlueprint",
				"datazone:DeleteEnvironmentProfile",
				"datazone:DeleteFormType",
				"datazone:DeleteGlossary",
				"datazone:DeleteGlossaryTerm",
				"datazone:DeleteListing",
				"datazone:DeleteProject",
				"datazone:DeleteProjectMembership",
				"datazone:DeleteRule",
				"datazone:DeleteSubscriptionGrant",
				"datazone:DeleteSubscriptionRequest",
				"datazone:DeleteSubscriptionTarget",
				"datazone:DeleteTimeSeriesDataPoints",
				"datazone:GetAsset",
				"datazone:GetAssetFilter",
				"datazone:GetAssetType",
				"datazone:GetDataProduct",
				"datazone:GetDataSource",
				"datazone:GetDataSourceRun",
				"datazone:GetDomain",
				"datazone:GetDomainUnit",
				"datazone:GetEnvironment",
				"datazone:GetEnvironmentAction",
				"datazone:GetEnvironmentActionLink",
				"datazone:GetEnvironmentBlueprint",
				"datazone:GetEnvironmentCredentials",
				"datazone:GetEnvironmentProfile",
				"datazone:GetFormType",
				"datazone:GetGlossary",
				"datazone:GetGlossaryTerm",
				"datazone:GetGroupProfile",
				"datazone:GetLineageNode",
				"datazone:GetListing",
				"datazone:GetMetadataGenerationRun",
				"datazone:GetProject",
				"datazone:GetRule",
				"datazone:GetSubscription",
				"datazone:GetSubscriptionEligibility",
				"datazone:GetSubscriptionGrant",
				"datazone:GetSubscriptionRequestDetails",
				"datazone:GetSubscriptionTarget",
				"datazone:GetTimeSeriesDataPoint",
				"datazone:GetUserProfile",
				"datazone:ListAccountEnvironments",
				"datazone:ListAssetFilters",
				"datazone:ListAssetRevisions",
				"datazone:ListDataProductRevisions",
				"datazone:ListDataSourceRunActivities",
				"datazone:ListDataSourceRuns",
				"datazone:ListDataSources",
				"datazone:ListDomainUnitsForParent",
				"datazone:ListEntityOwners",
				"datazone:ListEnvironmentActions",
				"datazone:ListEnvironmentBlueprintConfigurationSummaries",
				"datazone:ListEnvironmentBlueprintConfigurations",
				"datazone:ListEnvironmentBlueprints",
				"datazone:ListEnvironmentProfiles",
				"datazone:ListEnvironments",
				"datazone:ListGroupsForUser",
				"datazone:ListLineageNodeHistory",
				"datazone:ListMetadataGenerationRuns",
				"datazone:ListNotifications",
				"datazone:ListPolicyGrants",
				"datazone:ListProjectMemberships",
				"datazone:ListProjects",
				"datazone:ListRules",
				"datazone:ListSubscriptionGrants",
				"datazone:ListSubscriptionRequests",
				"datazone:ListSubscriptionTargets",
				"datazone:ListSubscriptions",
				"datazone:ListTimeSeriesDataPoints",
				"datazone:ListWarehouseMetadata",
				"datazone:RejectPredictions",
				"datazone:RejectSubscriptionRequest",
				"datazone:RemoveEntityOwner",
				"datazone:RemovePolicyGrant",
				"datazone:RevokeSubscription",
				"datazone:Search",
				"datazone:SearchGroupProfiles",
				"datazone:SearchListings",
				"datazone:SearchRules",
				"datazone:SearchTypes",
				"datazone:SearchUserProfiles",
				"datazone:StartDataSourceRun",
				"datazone:StartMetadataGenerationRun",
				"datazone:UpdateAssetFilter",
				"datazone:UpdateDataSource",
				"datazone:UpdateDomainUnit",
				"datazone:UpdateEnvironment",
				"datazone:UpdateEnvironmentBlueprint",
				"datazone:UpdateEnvironmentDeploymentStatus",
				"datazone:UpdateEnvironmentProfile",
				"datazone:UpdateGlossary",
				"datazone:UpdateGlossaryTerm",
				"datazone:UpdateProject",
				"datazone:UpdateRule",
				"datazone:UpdateSubscriptionGrantStatus",
				"datazone:UpdateSubscriptionRequest"
			],
			"Resource": "*"
		},
		{
			"Sid": "RAMResourceShareStatement",
			"Effect": "Allow",
			"Action": "ram:GetResourceShareAssociations",
			"Resource": "*"
		}
	]
}