# AWSWellArchitectedAgentResourceScanningServiceRolePolicy
**Description**: Grants the AWS Well-Architected Agent read-only access to AWS resource configurations, security settings, and operational data to generate optimization recommendations
`AWSWellArchitectedAgentResourceScanningServiceRolePolicy` is an [AWS managed policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies).
## Using this policy
This policy is attached to a service-linked role that allows the service to perform actions on your behalf. You cannot attach this policy to your users, groups, or roles.
## Policy details
+ **Type**: Service-linked role policy
+ **Creation time**: August 04, 2026, 17:27 UTC
+ **Edited time:** August 13, 2026, 00:27 UTC
+ **ARN**: `arn:aws:iam::aws:policy/aws-service-role/AWSWellArchitectedAgentResourceScanningServiceRolePolicy`
## Policy version
**Policy version:** v2 (default)
The policy's default version is the version that defines the permissions for the policy. When a user or role with the policy makes a request to access an AWS resource, AWS checks the default version of the policy to determine whether to allow the request.
## JSON policy document
```
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "WellArchitectedAgentScanningReadOnly1",
"Effect" : "Allow",
"Action" : [
"access-analyzer:GetAnalyzer",
"access-analyzer:ListAnalyzers",
"access-analyzer:ListArchiveRules",
"acm-pca:DescribeCertificateAuthority",
"acm-pca:GetCertificateAuthorityCsr",
"acm-pca:ListCertificateAuthorities",
"acm-pca:ListTags",
"acm:DescribeCertificate",
"aco-automation:GetAutomationRule",
"aco-automation:ListAutomationRules",
"aidevops:DescribePrivateConnection",
"aidevops:GetAgentSpace",
"aidevops:GetAssociation",
"aidevops:GetOperatorApp",
"aidevops:GetService",
"aidevops:ListAgentSpaces",
"aidevops:ListAssociations",
"aidevops:ListPrivateConnections",
"aidevops:ListServices",
"aidevops:ListTagsForResource",
"aiops:GetInvestigationGroup",
"aiops:GetInvestigationGroupPolicy",
"aiops:ListInvestigationGroups",
"aiops:ListTagsForResource",
"airflow-serverless:GetWorkflow",
"airflow-serverless:ListTagsForResource",
"airflow-serverless:ListWorkflows",
"airflow:GetEnvironment",
"airflow:ListEnvironments",
"amplify:GetApp",
"amplify:GetBranch",
"amplify:GetDomainAssociation",
"amplify:ListApps",
"amplify:ListBranches",
"amplify:ListDomainAssociations",
"amplify:ListTagsForResource",
"amplifyuibuilder:GetComponent",
"amplifyuibuilder:GetForm",
"amplifyuibuilder:GetTheme",
"amplifyuibuilder:ListComponents",
"amplifyuibuilder:ListForms",
"amplifyuibuilder:ListThemes",
"aoss:BatchGetCollection",
"aoss:BatchGetCollectionGroup",
"aoss:BatchGetLifecyclePolicy",
"aoss:BatchGetVpcEndpoint",
"aoss:GetAccessPolicy",
"aoss:GetSecurityConfig",
"aoss:GetSecurityPolicy",
"aoss:ListAccessPolicies",
"aoss:ListCollectionGroups",
"aoss:ListCollections",
"aoss:ListLifecyclePolicies",
"aoss:ListSecurityConfigs",
"aoss:ListSecurityPolicies",
"aoss:ListTagsForResource",
"aoss:ListVpcEndpoints",
"apigateway:GetRoutingRule",
"apigateway:ListRoutingRules",
"app-integrations:GetApplication",
"app-integrations:GetDataIntegration",
"app-integrations:GetEventIntegration",
"app-integrations:ListApplications",
"app-integrations:ListDataIntegrations",
"app-integrations:ListEventIntegrations",
"app-integrations:ListTagsForResource",
"appconfig:GetApplication",
"appconfig:GetConfigurationProfile",
"appconfig:GetDeployment",
"appconfig:GetDeploymentStrategy",
"appconfig:GetEnvironment",
"appconfig:GetExtension",
"appconfig:GetExtensionAssociation",
"appconfig:GetHostedConfigurationVersion",
"appconfig:ListApplications",
"appconfig:ListConfigurationProfiles",
"appconfig:ListDeploymentStrategies",
"appconfig:ListDeployments",
"appconfig:ListEnvironments",
"appconfig:ListExtensionAssociations",
"appconfig:ListExtensions",
"appconfig:ListHostedConfigurationVersions",
"appconfig:ListTagsForResource",
"appflow:DescribeConnector",
"appflow:DescribeConnectorProfiles",
"appflow:DescribeFlow",
"appflow:ListConnectors",
"appflow:ListFlows",
"appflow:ListTagsForResource",
"application-autoscaling:DescribeScalableTargets",
"application-autoscaling:DescribeScalingActivities",
"application-autoscaling:DescribeScalingPolicies",
"application-autoscaling:DescribeScheduledActions",
"application-signals:GetServiceLevelObjective",
"application-signals:ListGroupingAttributeDefinitions",
"application-signals:ListServiceLevelObjectiveExclusionWindows",
"application-signals:ListServiceLevelObjectives",
"application-signals:ListServices",
"application-signals:ListTagsForResource",
"applicationinsights:DescribeApplication",
"applicationinsights:DescribeComponent",
"applicationinsights:DescribeLogPattern",
"applicationinsights:ListApplications",
"applicationinsights:ListComponents",
"applicationinsights:ListLogPatternSets",
"applicationinsights:ListLogPatterns",
"applicationinsights:ListTagsForResource",
"apprunner:DescribeAutoScalingConfiguration",
"apprunner:DescribeObservabilityConfiguration",
"apprunner:DescribeService",
"apprunner:DescribeVpcConnector",
"apprunner:DescribeVpcIngressConnection",
"apprunner:ListAutoScalingConfigurations",
"apprunner:ListObservabilityConfigurations",
"apprunner:ListServices",
"apprunner:ListVpcConnectors",
"apprunner:ListVpcIngressConnections",
"appstream:DescribeAppBlockBuilders",
"appstream:DescribeDirectoryConfigs",
"appstream:DescribeImageBuilders",
"appstream:DescribeStacks",
"appstream:DescribeUserStackAssociations",
"appstream:DescribeUsers",
"appstream:ListTagsForResource",
"appsync:GetApi",
"appsync:GetChannelNamespace",
"appsync:GetDataSource",
"appsync:GetDomainName",
"appsync:GetGraphqlApi",
"appsync:GetSourceApiAssociation",
"appsync:ListApis",
"appsync:ListChannelNamespaces",
"appsync:ListDataSources",
"appsync:ListDomainNames",
"appsync:ListFunctions",
"appsync:ListGraphqlApis",
"appsync:ListResolvers",
"appsync:ListSourceApiAssociations",
"appsync:ListTagsForResource",
"apptest:GetTestCase",
"apptest:ListTagsForResource",
"apptest:ListTestCases",
"aps:DescribeAlertManagerDefinition",
"aps:DescribeAnomalyDetector",
"aps:DescribeLoggingConfiguration",
"aps:DescribeQueryLoggingConfiguration",
"aps:DescribeResourcePolicy",
"aps:DescribeRuleGroupsNamespace",
"aps:DescribeScraper",
"aps:DescribeScraperLoggingConfiguration",
"aps:DescribeWorkspace",
"aps:DescribeWorkspaceConfiguration",
"aps:ListAnomalyDetectors",
"aps:ListRuleGroupsNamespaces",
"aps:ListScrapers",
"aps:ListTagsForResource",
"aps:ListWorkspaces",
"arc-region-switch:GetPlan",
"arc-region-switch:ListPlans",
"arc-region-switch:ListRoute53HealthChecks",
"arc-region-switch:ListTagsForResource",
"arc-zonal-shift:GetAutoshiftObserverNotificationStatus",
"arc-zonal-shift:GetManagedResource",
"arc-zonal-shift:ListManagedResources",
"athena:GetCapacityAssignmentConfiguration",
"athena:GetCapacityReservation",
"athena:GetDataCatalog",
"athena:GetNamedQuery",
"athena:GetPreparedStatement",
"athena:GetWorkGroup",
"athena:ListCapacityReservations",
"athena:ListDataCatalogs",
"athena:ListNamedQueries",
"athena:ListPreparedStatements",
"athena:ListTagsForResource",
"athena:ListWorkGroups",
"auditmanager:GetAssessment",
"auditmanager:ListAssessments",
"auditmanager:ListTagsForResource",
"autoscaling:DescribeAccountLimits",
"autoscaling:DescribeAccountSettings",
"autoscaling:DescribeAdjustmentTypes",
"autoscaling:DescribeAutoScalingGroups",
"autoscaling:DescribeAutoScalingInstances",
"autoscaling:DescribeAutoScalingNotificationTypes",
"autoscaling:DescribeInstanceRefreshes",
"autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeLifecycleHookTypes",
"autoscaling:DescribeLifecycleHooks",
"autoscaling:DescribeLoadBalancerTargetGroups",
"autoscaling:DescribeLoadBalancers",
"autoscaling:DescribeMetricCollectionTypes",
"autoscaling:DescribeNotificationConfigurations",
"autoscaling:DescribePolicies",
"autoscaling:DescribeScalingActivities",
"autoscaling:DescribeScalingProcessTypes",
"autoscaling:DescribeScheduledActions",
"autoscaling:DescribeTags",
"autoscaling:DescribeTerminationPolicyTypes",
"autoscaling:DescribeTrafficSources",
"autoscaling:DescribeWarmPool",
"aws-external-anthropic:GetWorkspace",
"aws-external-anthropic:ListTagsForResource",
"aws-external-anthropic:ListWorkspaces",
"b2bi:GetCapability",
"b2bi:GetPartnership",
"b2bi:GetProfile",
"b2bi:GetTransformer",
"b2bi:ListCapabilities",
"b2bi:ListPartnerships",
"b2bi:ListProfiles",
"b2bi:ListTagsForResource",
"b2bi:ListTransformers",
"backup-gateway:GetHypervisor",
"backup-gateway:ListHypervisors",
"backup-gateway:ListTagsForResource",
"backup:DescribeBackupVault",
"backup:DescribeFramework",
"backup:DescribeReportPlan",
"backup:GetBackupPlan",
"backup:GetBackupSelection",
"backup:GetBackupVaultAccessPolicy",
"backup:GetBackupVaultNotifications",
"backup:GetRestoreTestingPlan",
"backup:GetRestoreTestingSelection",
"backup:GetTieringConfiguration",
"backup:ListBackupPlans",
"backup:ListBackupSelections",
"backup:ListBackupVaults",
"backup:ListFrameworks",
"backup:ListReportPlans",
"backup:ListRestoreTestingPlans",
"backup:ListRestoreTestingSelections",
"backup:ListTags",
"backup:ListTieringConfigurations",
"batch:DescribeComputeEnvironments",
"batch:DescribeConsumableResource",
"batch:DescribeJobDefinitions",
"batch:DescribeJobQueues",
"batch:DescribeQuotaShare",
"batch:DescribeSchedulingPolicies",
"batch:DescribeServiceEnvironments",
"batch:ListConsumableResources",
"batch:ListQuotaShares",
"batch:ListSchedulingPolicies",
"bcm-data-exports:GetExport",
"bcm-data-exports:ListExports",
"bcm-data-exports:ListTagsForResource",
"bcm-pricing-calculator:GetBillScenario",
"bcm-pricing-calculator:ListBillScenarios",
"bcm-pricing-calculator:ListTagsForResource",
"bedrock-mantle:GetProject",
"bedrock-mantle:ListProjects",
"bedrock-mantle:ListTagsForResource",
"bedrock:GetAgent",
"bedrock:GetAgentActionGroup",
"bedrock:GetAgentAlias",
"bedrock:GetAgentCollaborator",
"bedrock:GetAgentKnowledgeBase",
"bedrock:GetAutomatedReasoningPolicy",
"bedrock:GetBlueprint",
"bedrock:GetDataAutomationLibrary",
"bedrock:GetDataAutomationProject",
"bedrock:GetDataSource",
"bedrock:GetFlow",
"bedrock:GetFlowAlias",
"bedrock:GetFlowVersion",
"bedrock:GetGuardrail",
"bedrock:GetInferenceProfile",
"bedrock:GetKnowledgeBase",
"bedrock:GetPrompt",
"bedrock:GetPromptRouter",
"bedrock:ListAgentActionGroups",
"bedrock:ListAgentAliases",
"bedrock:ListAgentCollaborators",
"bedrock:ListAgentKnowledgeBases",
"bedrock:ListAgents",
"bedrock:ListAutomatedReasoningPolicies",
"bedrock:ListBlueprints",
"bedrock:ListDataAutomationLibraries",
"bedrock:ListDataAutomationProjects",
"bedrock:ListDataSources",
"bedrock:ListEnforcedGuardrailsConfiguration",
"bedrock:ListFlowAliases",
"bedrock:ListFlowVersions",
"bedrock:ListFlows",
"bedrock:ListGuardrails",
"bedrock:ListInferenceProfiles",
"bedrock:ListKnowledgeBases",
"bedrock:ListPromptRouters",
"bedrock:ListPrompts",
"bedrock:ListTagsForResource",
"billing:GetBillingView",
"billing:ListBillingViews",
"billing:ListSourceViewsForBillingView",
"billing:ListTagsForResource",
"billingconductor:ListAccountAssociations",
"billingconductor:ListBillingGroups",
"billingconductor:ListCustomLineItemVersions",
"billingconductor:ListCustomLineItems",
"billingconductor:ListPricingPlans",
"billingconductor:ListPricingRules",
"billingconductor:ListPricingRulesAssociatedToPricingPlan",
"billingconductor:ListResourcesAssociatedToCustomLineItem",
"billingconductor:ListTagsForResource",
"braket:ListTagsForResource",
"braket:SearchSpendingLimits",
"budgets:DescribeBudgetAction",
"budgets:DescribeBudgetActionsForAccount",
"budgets:DescribeBudgetActionsForBudget",
"budgets:ListTagsForResource",
"cases:BatchGetCaseRule",
"cases:BatchGetField",
"cases:GetDomain",
"cases:GetLayout",
"cases:GetTemplate",
"cases:ListCaseRules",
"cases:ListDomains",
"cases:ListFields",
"cases:ListLayouts",
"cases:ListTemplates",
"ce:DescribeCostCategoryDefinition",
"ce:GetAnomalyMonitors",
"ce:GetAnomalySubscriptions",
"ce:GetCostAndUsage",
"ce:GetCostAndUsageWithResources",
"ce:ListCostCategoryDefinitions",
"ce:ListTagsForResource",
"chatbot:DescribeSlackChannelConfigurations",
"chatbot:GetCustomAction",
"chatbot:GetMicrosoftTeamsChannelConfiguration",
"chatbot:ListAssociations",
"chatbot:ListCustomActions",
"chatbot:ListMicrosoftTeamsChannelConfigurations",
"chatbot:ListTagsForResource",
"chime:DescribeAppInstance",
"chime:DescribeAppInstanceBot",
"chime:ListAppInstanceBots",
"chime:ListAppInstances",
"chime:ListTagsForResource",
"cleanrooms-ml:GetConfiguredModelAlgorithm",
"cleanrooms-ml:GetConfiguredModelAlgorithmAssociation",
"cleanrooms-ml:GetTrainingDataset",
"cleanrooms-ml:ListConfiguredModelAlgorithmAssociations",
"cleanrooms-ml:ListConfiguredModelAlgorithms",
"cleanrooms-ml:ListTrainingDatasets",
"cleanrooms:GetAnalysisTemplate",
"cleanrooms:GetCollaboration",
"cleanrooms:GetConfiguredTable",
"cleanrooms:GetConfiguredTableAnalysisRule",
"cleanrooms:GetConfiguredTableAssociation",
"cleanrooms:GetConfiguredTableAssociationAnalysisRule",
"cleanrooms:GetIdMappingTable",
"cleanrooms:GetIdNamespaceAssociation",
"cleanrooms:GetMembership",
"cleanrooms:GetPrivacyBudgetTemplate",
"cleanrooms:ListAnalysisTemplates",
"cleanrooms:ListCollaborations",
"cleanrooms:ListConfiguredTableAssociations",
"cleanrooms:ListConfiguredTables",
"cleanrooms:ListIdMappingTables",
"cleanrooms:ListIdNamespaceAssociations",
"cleanrooms:ListMembers",
"cleanrooms:ListMemberships",
"cleanrooms:ListPrivacyBudgetTemplates",
"cleanrooms:ListTagsForResource",
"cloudformation:BatchDescribeTypeConfigurations",
"cloudformation:DescribePublisher",
"cloudformation:DescribeStackInstance",
"cloudformation:DescribeStackSet",
"cloudformation:DescribeStacks",
"cloudformation:DescribeType",
"cloudformation:GetResource",
"cloudformation:GetStackPolicy",
"cloudformation:GetTemplate",
"cloudformation:ListResources",
"cloudformation:ListStackInstances",
"cloudformation:ListStackSets",
"cloudformation:ListStacks",
"cloudformation:ListTypeVersions",
"cloudformation:ListTypes",
"cloudfront:DescribeConnectionFunction",
"cloudfront:DescribeFunction",
"cloudfront:DescribeKeyValueStore",
"cloudfront:GetAnycastIpList",
"cloudfront:GetCachePolicy",
"cloudfront:GetCloudFrontOriginAccessIdentity",
"cloudfront:GetConnectionFunction",
"cloudfront:GetConnectionGroup",
"cloudfront:GetContinuousDeploymentPolicy",
"cloudfront:GetDistribution",
"cloudfront:GetDistributionConfig",
"cloudfront:GetDistributionTenant",
"cloudfront:GetFunction",
"cloudfront:GetKeyGroup",
"cloudfront:GetOriginAccessControl",
"cloudfront:GetOriginRequestPolicy",
"cloudfront:GetPublicKey",
"cloudfront:GetRealtimeLogConfig",
"cloudfront:GetResponseHeadersPolicy",
"cloudfront:GetTrustStore",
"cloudfront:GetVpcOrigin",
"cloudfront:ListAnycastIpLists",
"cloudfront:ListCachePolicies",
"cloudfront:ListCloudFrontOriginAccessIdentities",
"cloudfront:ListConnectionFunctions",
"cloudfront:ListConnectionGroups",
"cloudfront:ListContinuousDeploymentPolicies",
"cloudfront:ListDistributionTenants",
"cloudfront:ListDistributions",
"cloudfront:ListFunctions",
"cloudfront:ListKeyGroups",
"cloudfront:ListKeyValueStores",
"cloudfront:ListOriginAccessControls",
"cloudfront:ListOriginRequestPolicies",
"cloudfront:ListPublicKeys",
"cloudfront:ListRealtimeLogConfigs",
"cloudfront:ListResponseHeadersPolicies",
"cloudfront:ListTagsForResource",
"cloudfront:ListTrustStores",
"cloudfront:ListVpcOrigins",
"cloudtrail:DescribeTrails",
"cloudtrail:GetChannel",
"cloudtrail:GetDashboard",
"cloudtrail:GetEventConfiguration",
"cloudtrail:GetEventDataStore",
"cloudtrail:GetEventSelectors",
"cloudtrail:GetInsightSelectors",
"cloudtrail:GetTrail",
"cloudtrail:GetTrailStatus",
"cloudtrail:ListChannels",
"cloudtrail:ListDashboards",
"cloudtrail:ListEventDataStores",
"cloudtrail:ListTags",
"cloudtrail:ListTrails",
"cloudwatch:DescribeAlarms",
"cloudwatch:GetAlarmMuteRule",
"cloudwatch:GetDashboard",
"cloudwatch:GetMetricData",
"cloudwatch:GetMetricStatistics",
"cloudwatch:GetMetricStream",
"cloudwatch:GetMetricWidgetImage",
"cloudwatch:GetOTelEnrichment",
"cloudwatch:ListAlarmMuteRules",
"cloudwatch:ListDashboards",
"cloudwatch:ListManagedInsightRules",
"cloudwatch:ListMetricStreams",
"cloudwatch:ListMetrics",
"cloudwatch:ListTagsForResource",
"codeartifact:DescribeDomain",
"codeartifact:DescribePackageGroup",
"codeartifact:DescribeRepository",
"codeartifact:GetDomainPermissionsPolicy",
"codeartifact:GetRepositoryPermissionsPolicy",
"codeartifact:ListAllowedRepositoriesForGroup",
"codeartifact:ListDomains",
"codeartifact:ListPackageGroups",
"codeartifact:ListRepositories",
"codeartifact:ListTagsForResource",
"codebuild:BatchGetFleets",
"codebuild:ListFleets",
"codecommit:GetRepository",
"codecommit:GetRepositoryTriggers",
"codeconnections:GetConnection",
"codeconnections:ListConnections",
"codeconnections:ListTagsForResource",
"codedeploy:GetApplication",
"codedeploy:GetDeployment",
"codedeploy:GetDeploymentConfig",
"codedeploy:GetDeploymentGroup",
"codedeploy:ListApplications",
"codedeploy:ListDeploymentConfigs",
"codedeploy:ListDeploymentGroups",
"codedeploy:ListDeployments",
"codedeploy:ListTagsForResource",
"codeguru-profiler:DescribeProfilingGroup",
"codeguru-profiler:GetNotificationConfiguration",
"codeguru-profiler:GetPolicy",
"codeguru-profiler:ListProfilingGroups",
"codeguru-profiler:ListTagsForResource",
"codeguru-reviewer:DescribeRepositoryAssociation",
"codeguru-reviewer:ListRepositoryAssociations",
"codeguru-reviewer:ListTagsForResource",
"codepipeline:GetPipeline",
"codepipeline:GetPipelineState",
"codepipeline:ListActionTypes",
"codepipeline:ListPipelines",
"codepipeline:ListTagsForResource",
"codepipeline:ListWebhooks",
"codestar-connections:GetConnection",
"codestar-connections:GetRepositoryLink",
"codestar-connections:GetSyncConfiguration",
"codestar-connections:ListConnections",
"codestar-connections:ListRepositoryLinks",
"codestar-connections:ListSyncConfigurations",
"codestar-connections:ListTagsForResource",
"codestar-notifications:DescribeNotificationRule",
"codestar-notifications:ListNotificationRules",
"cognito-identity:DescribeIdentityPool",
"cognito-identity:GetIdentityPoolRoles",
"cognito-identity:GetPrincipalTagAttributeMap",
"cognito-identity:ListIdentityPools",
"cognito-idp:DescribeIdentityProvider",
"cognito-idp:DescribeResourceServer",
"cognito-idp:DescribeTerms",
"cognito-idp:DescribeUserPool",
"cognito-idp:DescribeUserPoolClient",
"cognito-idp:GetGroup",
"cognito-idp:GetUserPoolMfaConfig",
"cognito-idp:ListGroups",
"cognito-idp:ListIdentityProviders",
"cognito-idp:ListResourceServers",
"cognito-idp:ListTerms",
"cognito-idp:ListUserPoolClients",
"cognito-idp:ListUserPools",
"comprehend:DescribeDocumentClassifier",
"comprehend:DescribeFlywheel",
"comprehend:DescribeResourcePolicy",
"comprehend:ListDocumentClassifiers",
"comprehend:ListFlywheels",
"comprehend:ListTagsForResource",
"config:DescribeAggregationAuthorizations",
"config:DescribeComplianceByConfigRule",
"config:DescribeConfigRules",
"config:DescribeConfigurationAggregators",
"config:DescribeConformancePacks",
"config:DescribeOrganizationConformancePacks",
"config:DescribeRemediationConfigurations",
"config:GetStoredQuery",
"config:ListStoredQueries",
"config:ListTagsForResource",
"connect-campaigns:DescribeCampaign",
"connect-campaigns:ListCampaigns",
"connect:DescribeAgentStatus",
"connect:DescribeContactFlow",
"connect:DescribeContactFlowModule",
"connect:DescribeContactFlowModuleAlias",
"connect:DescribeDataTable",
"connect:DescribeEvaluationForm",
"connect:DescribeHoursOfOperation",
"connect:DescribeInstance",
"connect:DescribeInstanceStorageConfig",
"connect:DescribeNotification",
"connect:DescribePhoneNumber",
"connect:DescribePredefinedAttribute",
"connect:DescribePrompt",
"connect:DescribeQueue",
"connect:DescribeQuickConnect",
"connect:DescribeRoutingProfile",
"connect:DescribeRule",
"connect:DescribeSecurityProfile",
"connect:DescribeTrafficDistributionGroup",
"connect:DescribeUserHierarchyGroup",
"connect:DescribeView",
"connect:DescribeWorkspace",
"connect:GetTaskTemplate",
"connect:ListAgentStatuses",
"connect:ListApprovedOrigins",
"connect:ListBots",
"connect:ListContactFlowModuleAliases",
"connect:ListContactFlowModuleVersions",
"connect:ListContactFlowModules",
"connect:ListContactFlowVersions",
"connect:ListContactFlows",
"connect:ListDataTableAttributes",
"connect:ListDataTables",
"connect:ListEvaluationFormVersions",
"connect:ListEvaluationForms",
"connect:ListHoursOfOperationOverrides",
"connect:ListHoursOfOperations",
"connect:ListInstanceAttributes",
"connect:ListInstanceStorageConfigs",
"connect:ListInstances",
"connect:ListIntegrationAssociations",
"connect:ListLambdaFunctions",
"connect:ListNotifications",
"connect:ListPredefinedAttributes",
"connect:ListPrompts",
"connect:ListQueueEmailAddresses",
"connect:ListQueueQuickConnects",
"connect:ListQueues",
"connect:ListQuickConnects",
"connect:ListRoutingProfileManualAssignmentQueues",
"connect:ListRoutingProfileQueues",
"connect:ListRoutingProfiles",
"connect:ListRules",
"connect:ListSecurityKeys",
"connect:ListSecurityProfileApplications",
"connect:ListSecurityProfileFlowModules",
"connect:ListSecurityProfilePermissions",
"connect:ListSecurityProfiles",
"connect:ListTagsForResource",
"connect:ListTaskTemplates",
"connect:ListTrafficDistributionGroups",
"connect:ListUserHierarchyGroups",
"connect:ListUserProficiencies",
"connect:ListUsers",
"connect:ListViewVersions",
"connect:ListViews",
"connect:ListWorkspaceMedia",
"connect:ListWorkspacePages",
"connect:ListWorkspaces",
"connect:SearchWorkspaceAssociations",
"controltower:GetEnabledBaseline",
"controltower:GetEnabledControl",
"controltower:GetLandingZone",
"controltower:ListEnabledBaselines",
"controltower:ListEnabledControls",
"controltower:ListLandingZones",
"controltower:ListTagsForResource",
"cur:DescribeReportDefinitions",
"cur:ListTagsForResource",
"databrew:DescribeDataset",
"databrew:DescribeJob",
"databrew:DescribeProject",
"databrew:DescribeRecipe",
"databrew:DescribeRuleset",
"databrew:DescribeSchedule",
"databrew:ListDatasets",
"databrew:ListJobs",
"databrew:ListProjects",
"databrew:ListRecipes",
"databrew:ListRulesets",
"databrew:ListSchedules",
"databrew:ListTagsForResource",
"datapipeline:DescribePipelines",
"datapipeline:GetPipelineDefinition",
"datapipeline:ListPipelines",
"datasync:DescribeAgent",
"datasync:DescribeLocationAzureBlob",
"datasync:DescribeLocationEfs",
"datasync:DescribeLocationFsxLustre",
"datasync:DescribeLocationFsxOntap",
"datasync:DescribeLocationFsxOpenZfs",
"datasync:DescribeLocationFsxWindows",
"datasync:DescribeLocationHdfs",
"datasync:DescribeLocationNfs",
"datasync:DescribeLocationObjectStorage",
"datasync:DescribeLocationS3",
"datasync:DescribeLocationSmb",
"datasync:DescribeTask",
"datasync:ListAgents",
"datasync:ListLocations",
"datasync:ListTagsForResource",
"datasync:ListTasks",
"datazone:GetDataSource",
"datazone:GetDomain",
"datazone:GetDomainUnit",
"datazone:GetEnvironment",
"datazone:GetEnvironmentAction",
"datazone:GetEnvironmentBlueprintConfiguration",
"datazone:GetEnvironmentProfile",
"datazone:GetGroupProfile",
"datazone:GetProject",
"datazone:GetProjectProfile",
"datazone:GetSubscriptionTarget",
"datazone:GetUserProfile",
"datazone:ListConnections",
"datazone:ListDataSources",
"datazone:ListDomainUnitsForParent",
"datazone:ListDomains",
"datazone:ListEntityOwners",
"datazone:ListEnvironmentActions",
"datazone:ListEnvironmentBlueprintConfigurations",
"datazone:ListEnvironmentProfiles",
"datazone:ListEnvironments",
"datazone:ListPolicyGrants",
"datazone:ListProjectMemberships",
"datazone:ListProjectProfiles",
"datazone:ListProjects",
"datazone:ListSubscriptionTargets",
"datazone:SearchGroupProfiles",
"datazone:SearchUserProfiles",
"deadline:GetFarm",
"deadline:GetFleet",
"deadline:GetLicenseEndpoint",
"deadline:GetLimit",
"deadline:GetMonitor",
"deadline:GetQueue",
"deadline:GetQueueEnvironment",
"deadline:GetQueueFleetAssociation",
"deadline:GetQueueLimitAssociation",
"deadline:GetStorageProfile",
"deadline:ListFarms",
"deadline:ListFleets",
"deadline:ListLicenseEndpoints",
"deadline:ListLimits",
"deadline:ListMeteredProducts",
"deadline:ListMonitors",
"deadline:ListQueueEnvironments",
"deadline:ListQueueFleetAssociations",
"deadline:ListQueueLimitAssociations",
"deadline:ListQueues",
"deadline:ListStorageProfiles",
"deadline:ListTagsForResource",
"detective:DescribeOrganizationConfiguration",
"detective:GetMembers",
"detective:ListGraphs",
"detective:ListMembers",
"detective:ListOrganizationAdminAccount",
"detective:ListTagsForResource",
"devicefarm:GetDevicePool",
"devicefarm:GetInstanceProfile",
"devicefarm:GetNetworkProfile",
"devicefarm:GetProject",
"devicefarm:GetTestGridProject",
"devicefarm:GetVPCEConfiguration",
"devicefarm:ListDevicePools",
"devicefarm:ListInstanceProfiles",
"devicefarm:ListNetworkProfiles",
"devicefarm:ListProjects",
"devicefarm:ListTagsForResource",
"devicefarm:ListTestGridProjects",
"devicefarm:ListVPCEConfigurations",
"devops-guru:DescribeServiceIntegration",
"devops-guru:GetResourceCollection",
"devops-guru:ListNotificationChannels",
"directconnect:DescribeConnections",
"directconnect:DescribeDirectConnectGatewayAssociations",
"directconnect:DescribeDirectConnectGateways",
"directconnect:DescribeLags",
"directconnect:DescribeVirtualInterfaces",
"dms:DescribeDataMigrations",
"dms:DescribeReplicationConfigs",
"dms:ListDataProviders",
"dms:ListInstanceProfiles",
"dms:ListMigrationProjects",
"dms:ListTagsForResource",
"docdb-elastic:GetCluster",
"docdb-elastic:ListClusters",
"docdb-elastic:ListTagsForResource",
"ds:DescribeDirectories",
"ds:ListTagsForResource",
"dsql:GetCluster",
"dsql:GetClusterPolicy",
"dsql:GetVpcEndpointServiceName",
"dsql:ListClusters",
"dsql:ListTagsForResource",
"dynamodb:DescribeBackup",
"dynamodb:DescribeContinuousBackups",
"dynamodb:DescribeContributorInsights",
"dynamodb:DescribeEndpoints",
"dynamodb:DescribeExport",
"dynamodb:DescribeGlobalTable",
"dynamodb:DescribeGlobalTableSettings",
"dynamodb:DescribeImport",
"dynamodb:DescribeKinesisStreamingDestination",
"dynamodb:DescribeLimits",
"dynamodb:DescribeReservedCapacity",
"dynamodb:DescribeReservedCapacityOfferings",
"dynamodb:DescribeStream",
"dynamodb:DescribeTable",
"dynamodb:DescribeTableReplicaAutoScaling",
"dynamodb:DescribeTimeToLive",
"dynamodb:GetResourcePolicy",
"dynamodb:ListTables",
"dynamodb:ListTagsOfResource",
"ecr-public:DescribeRepositories",
"ecr-public:GetRepositoryCatalogData",
"ecr-public:GetRepositoryPolicy",
"ecr-public:ListTagsForResource",
"ecr:DescribePullThroughCacheRules",
"ecr:DescribeRegistry",
"ecr:DescribeRepositories",
"ecr:DescribeRepositoryCreationTemplates",
"ecr:GetLifecyclePolicy",
"ecr:GetRegistryPolicy",
"ecr:GetRegistryScanningConfiguration",
"ecr:GetRepositoryPolicy",
"ecr:GetSigningConfiguration",
"ecr:ListPullTimeUpdateExclusions",
"ecr:ListTagsForResource",
"ecs:DescribeCapacityProviders",
"ecs:DescribeClusters",
"ecs:DescribeDaemon",
"ecs:DescribeDaemonTaskDefinition",
"ecs:DescribeServices",
"ecs:DescribeTaskDefinition",
"ecs:ListClusters",
"ecs:ListDaemonTaskDefinitions",
"ecs:ListDaemons",
"ecs:ListServices",
"ecs:ListTagsForResource",
"ecs:ListTaskDefinitions",
"eks:DescribeAccessEntry",
"eks:DescribeAddon",
"eks:DescribeCapability",
"eks:DescribeCluster",
"eks:DescribeFargateProfile",
"eks:DescribeIdentityProviderConfig",
"eks:DescribeNodegroup",
"eks:DescribePodIdentityAssociation",
"eks:ListAccessEntries",
"eks:ListAddons",
"eks:ListAssociatedAccessPolicies",
"eks:ListCapabilities",
"eks:ListClusters",
"eks:ListFargateProfiles",
"eks:ListIdentityProviderConfigs",
"eks:ListNodegroups",
"eks:ListPodIdentityAssociations",
"elasticache:DescribeCacheClusters",
"elasticache:DescribeCacheParameterGroups",
"elasticache:DescribeCacheParameters",
"elasticache:DescribeCacheSubnetGroups",
"elasticache:DescribeGlobalReplicationGroups",
"elasticache:DescribeReplicationGroups",
"elasticache:DescribeServerlessCaches",
"elasticache:DescribeUserGroups",
"elasticache:DescribeUsers",
"elasticache:ListTagsForResource",
"elasticbeanstalk:DescribeApplicationVersions",
"elasticbeanstalk:DescribeApplications",
"elasticbeanstalk:DescribeConfigurationSettings",
"elasticbeanstalk:DescribeEnvironments",
"elasticbeanstalk:ListTagsForResource"
],
"Resource" : "*"
}
]
}
```
## Learn more
+ [Understand versioning for IAM policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [Get started with AWS managed policies and move toward least-privilege permissions](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)