You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
24 KiB
24 KiB
| 1 | eventName | function | highlight | notable |
|---|---|---|---|---|
| 2 | AddRoleToInstanceProfile | IAM | low | true |
| 3 | AddUserToGroup | IAM | low | true |
| 4 | ChangePassword | IAM | elevated | true |
| 5 | CreateAccessKey | IAM | low | true |
| 6 | CreateAccountAlias | IAM | low | true |
| 7 | CreateGroup | IAM | low | true |
| 8 | CreateInstanceProfile | IAM | low | true |
| 9 | CreateLoginProfile | IAM | low | true |
| 10 | CreateRole | IAM | low | true |
| 11 | CreateSAMLProvider | IAM | low | true |
| 12 | CreateUser | IAM | low | true |
| 13 | CreateVirtualMFADevice | IAM | low | true |
| 14 | DeactivateMFADevice | IAM | severe | true |
| 15 | DeleteAccessKey | IAM | severe | true |
| 16 | DeleteAccountAlias | IAM | severe | true |
| 17 | DeleteAccountPasswordPolicy | IAM | severe | true |
| 18 | DeleteGroup | IAM | severe | true |
| 19 | DeleteGroupPolicy | IAM | severe | true |
| 20 | DeleteInstanceProfile | IAM | severe | true |
| 21 | DeleteLoginProfile | IAM | severe | true |
| 22 | DeleteRole | IAM | severe | true |
| 23 | DeleteRolePolicy | IAM | severe | true |
| 24 | DeleteSAMLProvider | IAM | severe | true |
| 25 | DeleteServerCertificate | IAM | severe | true |
| 26 | DeleteSigningCertificate | IAM | severe | true |
| 27 | DeleteUser | IAM | severe | true |
| 28 | DeleteUserPolicy | IAM | severe | true |
| 29 | DeleteVirtualMFADevice | IAM | severe | true |
| 30 | EnableMFADevice | IAM | low | true |
| 31 | GetAccountPasswordPolicy | IAM | elevated | false |
| 32 | GetAccountSummary | IAM | elevated | false |
| 33 | GetGroup | IAM | elevated | false |
| 34 | GetGroupPolicy | IAM | elevated | false |
| 35 | GetInstanceProfile | IAM | elevated | false |
| 36 | GetLoginProfile | IAM | elevated | false |
| 37 | GetRole | IAM | elevated | false |
| 38 | GetRolePolicy | IAM | elevated | false |
| 39 | GetSAMLProvider | IAM | elevated | false |
| 40 | GetServerCertificate | IAM | elevated | false |
| 41 | GetUser | IAM | elevated | false |
| 42 | GetUserPolicy | IAM | elevated | false |
| 43 | ListAccessKeys | IAM | elevated | false |
| 44 | ListAccountAliases | IAM | elevated | false |
| 45 | ListGroupPolicies | IAM | elevated | false |
| 46 | ListGroups | IAM | elevated | false |
| 47 | ListGroupsForUser | IAM | elevated | false |
| 48 | ListInstanceProfiles | IAM | elevated | false |
| 49 | ListInstanceProfilesForRole | IAM | elevated | false |
| 50 | ListMFADevices | IAM | elevated | false |
| 51 | ListRolePolicies | IAM | elevated | false |
| 52 | ListRoles | IAM | elevated | false |
| 53 | ListSAMLProviders | IAM | elevated | false |
| 54 | ListServerCertificates | IAM | elevated | false |
| 55 | ListSigningCertificates | IAM | elevated | false |
| 56 | ListUserPolicies | IAM | elevated | false |
| 57 | ListUsers | IAM | elevated | false |
| 58 | ListVirtualMFADevices | IAM | elevated | false |
| 59 | PutGroupPolicy | IAM | low | true |
| 60 | PutRolePolicy | IAM | low | true |
| 61 | PutUserPolicy | IAM | low | true |
| 62 | RemoveRoleFromInstanceProfile | IAM | severe | true |
| 63 | RemoveUserFromGroup | IAM | severe | true |
| 64 | ResyncMFADevice | IAM | low | true |
| 65 | UpdateAccessKey | IAM | elevated | true |
| 66 | UpdateAccountPasswordPolicy | IAM | elevated | true |
| 67 | UpdateAssumeRolePolicy | IAM | elevated | true |
| 68 | UpdateGroup | IAM | elevated | true |
| 69 | UpdateLoginProfile | IAM | elevated | true |
| 70 | UpdateSAMLProvider | IAM | elevated | true |
| 71 | UpdateServerCertificate | IAM | elevated | true |
| 72 | UpdateSigningCertificate | IAM | elevated | true |
| 73 | UpdateUser | IAM | elevated | true |
| 74 | UploadServerCertificate | IAM | low | true |
| 75 | UploadSigningCertificate | IAM | low | true |
| 76 | DescribeAccountAttributes | Account Attributes | elevated | false |
| 77 | ConfirmProductInstance | DevPay | low | false |
| 78 | CopyImage | AMIs | low | true |
| 79 | CreateImage | AMIs | low | true |
| 80 | DeregisterImage | AMIs | severe | true |
| 81 | DescribeImageAttribute | AMIs | elevated | false |
| 82 | DescribeImages | AMIs | elevated | false |
| 83 | ModifyImageAttribute | AMIs | elevated | true |
| 84 | RegisterImage | AMIs | low | true |
| 85 | ResetImageAttribute | AMIs | severe | true |
| 86 | BundleInstance | Bundle Tasks | low | true |
| 87 | CancelBundleTask | Bundle Tasks | severe | true |
| 88 | DescribeBundleTasks | Bundle Tasks | elevated | false |
| 89 | CreateCustomerGateway | VPC | low | true |
| 90 | DeleteCustomerGateway | VPC | severe | true |
| 91 | DescribeCustomerGateways | VPC | elevated | false |
| 92 | AssociateDhcpOptions | VPC | low | true |
| 93 | CreateDhcpOptions | VPC | low | true |
| 94 | DeleteDhcpOptions | VPC | severe | true |
| 95 | DescribeDhcpOptions | VPC | elevated | false |
| 96 | AttachVolume | EBS | low | true |
| 97 | CopySnapshot | EBS | low | true |
| 98 | CreateSnapshot | EBS | low | true |
| 99 | CreateVolume | EBS | low | true |
| 100 | DeleteSnapshot | EBS | severe | true |
| 101 | DeleteVolume | EBS | severe | true |
| 102 | DescribeSnapshotAttribute | EBS | elevated | false |
| 103 | DescribeSnapshots | EBS | elevated | false |
| 104 | DescribeVolumeAttribute | EBS | elevated | false |
| 105 | DescribeVolumes | EBS | elevated | false |
| 106 | DescribeVolumeStatus | EBS | elevated | false |
| 107 | DetachVolume | EBS | severe | true |
| 108 | EnableVolumeIO | EBS | low | true |
| 109 | ModifySnapshotAttribute | EBS | elevated | true |
| 110 | ModifyVolumeAttribute | EBS | elevated | true |
| 111 | ResetSnapshotAttribute | EBS | severe | true |
| 112 | AllocateAddress | Elastic IP Addresses | low | true |
| 113 | AssociateAddress | Elastic IP Addresses | low | true |
| 114 | DescribeAddresses | Elastic IP Addresses | elevated | false |
| 115 | DisassociateAddress | Elastic IP Addresses | severe | true |
| 116 | ReleaseAddress | Elastic IP Addresses | elevated | true |
| 117 | AssignPrivateIpAddresses | VPC | low | true |
| 118 | AttachNetworkInterface | VPC | low | true |
| 119 | CreateNetworkInterface | VPC | low | true |
| 120 | DeleteNetworkInterface | VPC | severe | true |
| 121 | DescribeNetworkInterfaceAttribute | VPC | elevated | false |
| 122 | DescribeNetworkInterfaces | VPC | elevated | false |
| 123 | DetachNetworkInterface | VPC | severe | true |
| 124 | ModifyNetworkInterfaceAttribute | VPC | elevated | true |
| 125 | ResetNetworkInterfaceAttribute | VPC | severe | true |
| 126 | UnassignPrivateIpAddresses | VPC | severe | true |
| 127 | DescribeInstanceAttribute | Instances | elevated | false |
| 128 | DescribeInstances | Instances | elevated | false |
| 129 | DescribeInstanceStatus | Instances | elevated | false |
| 130 | GetConsoleOutput | Instances | elevated | true |
| 131 | GetPasswordData | Instances | elevated | true |
| 132 | ModifyInstanceAttribute | Instances | elevated | true |
| 133 | MonitorInstances | Instances | elevated | true |
| 134 | RebootInstances | Instances | severe | true |
| 135 | ReportInstanceStatus | Instances | elevated | true |
| 136 | ResetInstanceAttribute | Instances | severe | true |
| 137 | RunInstances | Instances | low | true |
| 138 | StartInstances | Instances | low | true |
| 139 | StopInstances | Instances | severe | true |
| 140 | TerminateInstances | Instances | severe | true |
| 141 | UnmonitorInstances | Instances | severe | true |
| 142 | AttachInternetGateway | VPC | low | true |
| 143 | CreateInternetGateway | VPC | low | true |
| 144 | DeleteInternetGateway | VPC | severe | true |
| 145 | DescribeInternetGateways | VPC | elevated | false |
| 146 | DetachInternetGateway | VPC | severe | true |
| 147 | CreateKeyPair | Key Pairs | low | true |
| 148 | DeleteKeyPair | Key Pairs | severe | true |
| 149 | DescribeKeyPairs | Key Pairs | elevated | false |
| 150 | ImportKeyPair | Key Pairs | low | true |
| 151 | CreateNetworkAcl | VPC | low | true |
| 152 | CreateNetworkAclEntry | VPC | low | true |
| 153 | DeleteNetworkAcl | VPC | severe | true |
| 154 | DeleteNetworkAclEntry | VPC | severe | true |
| 155 | DescribeNetworkAcls | VPC | elevated | false |
| 156 | ReplaceNetworkAclAssociation | VPC | elevated | true |
| 157 | ReplaceNetworkAclEntry | VPC | elevated | true |
| 158 | CreatePlacementGroup | Placement Groups | low | true |
| 159 | DeletePlacementGroup | Placement Groups | severe | true |
| 160 | DescribePlacementGroups | Placement Groups | elevated | false |
| 161 | DescribeAvailabilityZones | Regions | elevated | false |
| 162 | DescribeRegions | Regions | elevated | false |
| 163 | CancelReservedInstancesListing | RI | severe | false |
| 164 | CreateReservedInstancesListing | RI | low | false |
| 165 | DescribeReservedInstances | RI | elevated | false |
| 166 | DescribeReservedInstancesListings | RI | elevated | false |
| 167 | DescribeReservedInstancesModifications | RI | elevated | false |
| 168 | DescribeReservedInstancesOfferings | RI | elevated | false |
| 169 | ModifyReservedInstances | RI | elevated | true |
| 170 | PurchaseReservedInstancesOffering | RI | low | true |
| 171 | AssociateRouteTable | VPC | low | true |
| 172 | CreateRoute | VPC | low | true |
| 173 | CreateRouteTable | VPC | low | true |
| 174 | DeleteRoute | VPC | severe | true |
| 175 | DeleteRouteTable | VPC | severe | true |
| 176 | DescribeRouteTables | VPC | elevated | false |
| 177 | DisableVgwRoutePropagation | VPC | severe | false |
| 178 | DisassociateRouteTable | VPC | severe | true |
| 179 | EnableVgwRoutePropagation | VPC | low | true |
| 180 | ReplaceRoute | VPC | elevated | true |
| 181 | ReplaceRouteTableAssociation | VPC | elevated | true |
| 182 | AuthorizeSecurityGroupEgress | Security Groups | low | true |
| 183 | AuthorizeSecurityGroupIngress | Security Groups | low | true |
| 184 | CreateSecurityGroup | Security Groups | low | true |
| 185 | DeleteSecurityGroup | Security Groups | severe | true |
| 186 | DescribeSecurityGroups | Security Groups | elevated | false |
| 187 | RevokeSecurityGroupEgress | Security Groups | severe | true |
| 188 | RevokeSecurityGroupIngress | Security Groups | severe | true |
| 189 | CancelSpotInstanceRequests | Spot Instances | severe | true |
| 190 | CreateSpotDatafeedSubscription | Spot Instances | low | true |
| 191 | DeleteSpotDatafeedSubscription | Spot Instances | severe | true |
| 192 | DescribeSpotDatafeedSubscription | Spot Instances | elevated | false |
| 193 | DescribeSpotInstanceRequests | Spot Instances | elevated | false |
| 194 | DescribeSpotPriceHistory | Spot Instances | elevated | false |
| 195 | RequestSpotInstances | Spot Instances | low | true |
| 196 | CreateSubnet | VPC | low | true |
| 197 | DeleteSubnet | VPC | severe | true |
| 198 | DescribeSubnets | VPC | elevated | false |
| 199 | CreateTags | Tags | low | true |
| 200 | DeleteTags | Tags | severe | true |
| 201 | DescribeTags | Tags | elevated | false |
| 202 | CancelConversionTask | VM Import | severe | true |
| 203 | DescribeConversionTasks | VM Import | elevated | false |
| 204 | ImportInstance | VM Import | low | true |
| 205 | ImportVolume | VM Import | low | true |
| 206 | CancelExportTask | VM Export | severe | true |
| 207 | CreateInstanceExportTask | VM Export | low | true |
| 208 | DescribeExportTasks | VM Export | elevated | false |
| 209 | CreateVpc | VPC | low | true |
| 210 | DeleteVpc | VPC | severe | true |
| 211 | DescribeVpcAttribute | VPC | elevated | false |
| 212 | DescribeVpcs | VPC | elevated | false |
| 213 | ModifyVpcAttribute | VPC | elevated | true |
| 214 | AcceptVpcPeeringConnection | VPC | low | true |
| 215 | CreateVpcPeeringConnection | VPC | low | true |
| 216 | DeleteVpcPeeringConnection | VPC | severe | true |
| 217 | DescribeVpcPeeringConnections | VPC | elevated | false |
| 218 | RejectVpcPeeringConnection | VPC | severe | true |
| 219 | CreateVpnConnection | VPC | low | true |
| 220 | CreateVpnConnectionRoute | VPC | low | true |
| 221 | DeleteVpnConnection | VPC | severe | true |
| 222 | DeleteVpnConnectionRoute | VPC | severe | true |
| 223 | DescribeVpnConnections | VPC | elevated | false |
| 224 | AttachVpnGateway | VPC | low | true |
| 225 | CreateVpnGateway | VPC | low | true |
| 226 | DeleteVpnGateway | VPC | severe | true |
| 227 | DescribeVpnGateways | VPC | elevated | false |
| 228 | DetachVpnGateway | VPC | severe | true |
| 229 | AssumeRole | STS | low | true |
| 230 | AssumeRoleWithSAML | STS | low | true |
| 231 | AssumeRoleWithWebIdentity | STS | low | true |
| 232 | DecodeAuthorizationMessage | STS | low | true |
| 233 | GetFederationToken | STS | elevated | true |
| 234 | GetSessionToken | STS | elevated | true |
| 235 | PutMetricAlarm | CloudWatch | low | true |
| 236 | DescribeAlarms | CloudWatch | elevated | false |
| 237 | DescribeAlarmHistory | CloudWatch | elevated | false |
| 238 | DescribeAlarmsForMetric | CloudWatch | elevated | false |
| 239 | DisableAlarmActions | CloudWatch | severe | true |
| 240 | EnableAlarmActions | CloudWatch | low | true |
| 241 | SetAlarmState | CloudWatch | low | true |
| 242 | DeleteAlarms | CloudWatch | severe | true |
| 243 | DeprecateActivityType | SWF | severe | true |
| 244 | DeprecateDomain | SWF | severe | true |
| 245 | DeprecateWorkflowType | SWF | severe | true |
| 246 | RegisterActivityType | SWF | low | true |
| 247 | RegisterDomain | SWF | low | true |
| 248 | RegisterWorkflowType | SWF | low | true |
| 249 | AddPermission | SQS | low | true |
| 250 | CreateQueue | SQS | low | true |
| 251 | DeleteQueue | SQS | severe | true |
| 252 | RemovePermission | SQS | severe | true |
| 253 | SetQueueAttributes | SQS | low | true |
| 254 | AllocateConnectionOnInterconnect | Direct Connect | low | true |
| 255 | AllocatePrivateVirtualInterface | Direct Connect | low | true |
| 256 | AllocatePublicVirtualInterface | Direct Connect | low | true |
| 257 | ConfirmConnection | Direct Connect | low | true |
| 258 | ConfirmPrivateVirtualInterface | Direct Connect | low | true |
| 259 | ConfirmPublicVirtualInterface | Direct Connect | low | true |
| 260 | CreateConnection | Direct Connect | low | true |
| 261 | CreateInterconnect | Direct Connect | low | true |
| 262 | CreatePrivateVirtualInterface | Direct Connect | low | true |
| 263 | CreatePublicVirtualInterface | Direct Connect | low | true |
| 264 | DeleteConnection | Direct Connect | severe | true |
| 265 | DeleteInterconnect | Direct Connect | severe | true |
| 266 | DeleteVirtualInterface | Direct Connect | severe | true |
| 267 | DescribeConnections | Direct Connect | elevated | false |
| 268 | DescribeConnectionsOnInterconnect | Direct Connect | elevated | false |
| 269 | DescribeInterconnects | Direct Connect | elevated | false |
| 270 | DescribeLocations | Direct Connect | elevated | false |
| 271 | DescribeVirtualGateways | Direct Connect | elevated | false |
| 272 | DescribeVirtualInterfaces | Direct Connect | elevated | false |
| 273 | ApplySecurityGroupsToLoadBalancer | ELB | low | true |
| 274 | AttachLoadBalancerToSubnets | ELB | low | true |
| 275 | ConfigureHealthCheck | ELB | low | true |
| 276 | CreateAppCookieStickinessPolicy | ELB | low | true |
| 277 | CreateLBCookieStickinessPolicy | ELB | low | true |
| 278 | CreateLoadBalancer | ELB | low | true |
| 279 | CreateLoadBalancerListeners | ELB | low | false |
| 280 | CreateLoadBalancerPolicy | ELB | low | true |
| 281 | DeleteLoadBalancer | ELB | severe | true |
| 282 | DeleteLoadBalancerListeners | ELB | severe | false |
| 283 | DeleteLoadBalancerPolicy | ELB | severe | true |
| 284 | DeregisterInstancesFromLoadBalancer | ELB | severe | true |
| 285 | DetachLoadBalancerFromSubnets | ELB | severe | true |
| 286 | DisableAvailabilityZonesForLoadBalancer | ELB | severe | true |
| 287 | EnableAvailabilityZonesForLoadBalancer | ELB | low | true |
| 288 | ModifyLoadBalancerAttributes | ELB | elevated | true |
| 289 | RegisterInstancesWithLoadBalancer | ELB | low | true |
| 290 | SetLoadBalancerListenerSSLCertificate | ELB | low | false |
| 291 | SetLoadBalancerPoliciesForBackendServer | ELB | low | true |
| 292 | SetLoadBalancerPoliciesOfListener | ELB | low | false |
| 293 | DescribeLoadBalancerPolicies | ELB | elevated | false |
| 294 | DescribeLoadBalancerPolicyTypes | ELB | elevated | false |
| 295 | DescribeLoadBalancers | ELB | elevated | false |
| 296 | AttachInstances | Auto Scaling | low | true |
| 297 | CompleteLifecycleAction | Auto Scaling | low | true |
| 298 | CreateAutoScalingGroup | Auto Scaling | low | true |
| 299 | CreateLaunchConfiguration | Auto Scaling | low | true |
| 300 | CreateOrUpdateTags | Auto Scaling | low | true |
| 301 | DeleteAutoScalingGroup | Auto Scaling | severe | true |
| 302 | DeleteLaunchConfiguration | Auto Scaling | severe | true |
| 303 | DeleteLifecycleHook | Auto Scaling | severe | true |
| 304 | DeleteNotificationConfiguration | Auto Scaling | severe | true |
| 305 | DeletePolicy | Auto Scaling | severe | true |
| 306 | DeleteScheduledAction | Auto Scaling | severe | true |
| 307 | DeleteTags | Auto Scaling | severe | true |
| 308 | DescribeAccountLimits | Auto Scaling | elevated | false |
| 309 | DescribeAdjustmentTypes | Auto Scaling | elevated | false |
| 310 | DescribeAutoScalingGroups | Auto Scaling | elevated | false |
| 311 | DescribeAutoScalingInstances | Auto Scaling | elevated | false |
| 312 | DescribeAutoScalingNotificationTypes | Auto Scaling | elevated | false |
| 313 | DescribeLaunchConfigurations | Auto Scaling | elevated | false |
| 314 | DescribeLifecycleHookTypes | Auto Scaling | elevated | false |
| 315 | DescribeLifecycleHooks | Auto Scaling | elevated | false |
| 316 | DescribeMetricCollectionTypes | Auto Scaling | elevated | false |
| 317 | DescribeNotificationConfigurations | Auto Scaling | elevated | false |
| 318 | DescribePolicies | Auto Scaling | elevated | false |
| 319 | DescribeScalingActivities | Auto Scaling | elevated | false |
| 320 | DescribeScalingProcessTypes | Auto Scaling | elevated | false |
| 321 | DescribeScheduledActions | Auto Scaling | elevated | false |
| 322 | DescribeTags | Auto Scaling | elevated | false |
| 323 | DescribeTerminationPolicyTypes | Auto Scaling | elevated | false |
| 324 | DetachInstances | Auto Scaling | severe | true |
| 325 | DisableMetricsCollection | Auto Scaling | severe | true |
| 326 | EnableMetricsCollection | Auto Scaling | low | true |
| 327 | EnterStandby | Auto Scaling | low | true |
| 328 | ExecutePolicy | Auto Scaling | low | true |
| 329 | ExitStandby | Auto Scaling | severe | true |
| 330 | PutLifecycleHook | Auto Scaling | low | true |
| 331 | PutNotificationConfiguration | Auto Scaling | low | true |
| 332 | PutScalingPolicy | Auto Scaling | low | true |
| 333 | PutScheduledUpdateGroupAction | Auto Scaling | low | true |
| 334 | RecordLifecycleActionHeartbeat | Auto Scaling | low | true |
| 335 | ResumeProcesses | Auto Scaling | low | true |
| 336 | SetDesiredCapacity | Auto Scaling | low | true |
| 337 | SetInstanceHealth | Auto Scaling | low | true |
| 338 | SuspendProcesses | Auto Scaling | severe | true |
| 339 | TerminateInstanceInAutoScalingGroup | Auto Scaling | severe | true |
| 340 | UpdateAutoScalingGroup | Auto Scaling | elevated | true |
| 341 | AddSourceIdentifierToSubscription | RDS | low | true |
| 342 | AddTagsToResource | RDS | low | true |
| 343 | AuthorizeDBSecurityGroupIngress | RDS | low | true |
| 344 | CopyDBSnapshot | RDS | low | true |
| 345 | CreateDBInstance | RDS | low | true |
| 346 | CreateDBInstanceReadReplica | RDS | low | true |
| 347 | CreateDBParameterGroup | RDS | low | true |
| 348 | CreateDBSecurityGroup | RDS | low | true |
| 349 | CreateDBSnapshot | RDS | low | true |
| 350 | CreateDBSubnetGroup | RDS | low | true |
| 351 | CreateEventSubscription | RDS | low | true |
| 352 | CreateOptionGroup | RDS | low | true |
| 353 | DeleteDBInstance | RDS | severe | true |
| 354 | DeleteDBParameterGroup | RDS | severe | true |
| 355 | DeleteDBSecurityGroup | RDS | severe | true |
| 356 | DeleteDBSnapshot | RDS | severe | true |
| 357 | DeleteDBSubnetGroup | RDS | severe | true |
| 358 | DeleteEventSubscription | RDS | severe | true |
| 359 | DeleteOptionGroup | RDS | severe | true |
| 360 | DescribeDBEngineVersions | RDS | elevated | false |
| 361 | DescribeDBInstances | RDS | elevated | false |
| 362 | DescribeDBLogFiles | RDS | elevated | false |
| 363 | DescribeDBParameterGroups | RDS | elevated | false |
| 364 | DescribeDBParameters | RDS | elevated | false |
| 365 | DescribeDBSecurityGroups | RDS | elevated | false |
| 366 | DescribeDBSnapshots | RDS | elevated | false |
| 367 | DescribeDBSubnetGroups | RDS | elevated | false |
| 368 | DescribeEngineDefaultParameters | RDS | elevated | false |
| 369 | DescribeEventCategories | RDS | elevated | false |
| 370 | DescribeEventSubscriptions | RDS | elevated | false |
| 371 | DescribeEvents | RDS | elevated | false |
| 372 | DescribeOptionGroupOptions | RDS | elevated | false |
| 373 | DescribeOptionGroups | RDS | elevated | false |
| 374 | DescribeOrderableDBInstanceOptions | RDS | elevated | false |
| 375 | DescribeReservedDBInstances | RDS | elevated | false |
| 376 | DescribeReservedDBInstancesOfferings | RDS | elevated | false |
| 377 | DownloadDBLogFilePortion | RDS | elevated | true |
| 378 | ListTagsForResource | RDS | elevated | false |
| 379 | ModifyDBInstance | RDS | elevated | true |
| 380 | ModifyDBParameterGroup | RDS | elevated | true |
| 381 | ModifyDBSubnetGroup | RDS | elevated | true |
| 382 | ModifyEventSubscription | RDS | elevated | true |
| 383 | ModifyOptionGroup | RDS | elevated | true |
| 384 | PromoteReadReplica | RDS | low | true |
| 385 | PurchaseReservedDBInstancesOffering | RDS | low | true |
| 386 | RebootDBInstance | RDS | severe | true |
| 387 | RemoveSourceIdentifierFromSubscription | RDS | severe | true |
| 388 | RemoveTagsFromResource | RDS | severe | true |
| 389 | ResetDBParameterGroup | RDS | severe | true |
| 390 | RestoreDBInstanceFromDBSnapshot | RDS | low | true |
| 391 | RestoreDBInstanceToPointInTime | RDS | low | true |
| 392 | RevokeDBSecurityGroupIngress | RDS | severe | true |
| 393 | AuthorizeClusterSecurityGroupIngress | Redshift | low | true |
| 394 | AuthorizeSnapshotAccess | Redshift | low | true |
| 395 | CopyClusterSnapshot | Redshift | low | true |
| 396 | CreateCluster | Redshift | low | true |
| 397 | CreateClusterParameterGroup | Redshift | low | true |
| 398 | CreateClusterSecurityGroup | Redshift | low | true |
| 399 | CreateClusterSnapshot | Redshift | low | true |
| 400 | CreateClusterSubnetGroup | Redshift | low | true |
| 401 | CreateEventSubscription | Redshift | low | true |
| 402 | CreateHsmClientCertificate | Redshift | low | true |
| 403 | CreateHsmConfiguration | Redshift | low | true |
| 404 | DeleteCluster | Redshift | severe | true |
| 405 | DeleteClusterParameterGroup | Redshift | severe | true |
| 406 | DeleteClusterSecurityGroup | Redshift | severe | true |
| 407 | DeleteClusterSnapshot | Redshift | severe | true |
| 408 | DeleteClusterSubnetGroup | Redshift | severe | true |
| 409 | DeleteEventSubscription | Redshift | severe | true |
| 410 | DeleteHsmClientCertificate | Redshift | severe | true |
| 411 | DeleteHsmConfiguration | Redshift | severe | true |
| 412 | DescribeClusterParameterGroups | Redshift | elevated | false |
| 413 | DescribeClusterParameters | Redshift | elevated | false |
| 414 | DescribeClusterSecurityGroups | Redshift | elevated | false |
| 415 | DescribeClusterSnapshots | Redshift | elevated | false |
| 416 | DescribeClusterSubnetGroups | Redshift | elevated | false |
| 417 | DescribeClusterVersions | Redshift | elevated | false |
| 418 | DescribeClusters | Redshift | elevated | false |
| 419 | DescribeDefaultClusterParameters | Redshift | elevated | false |
| 420 | DescribeEventCategories | Redshift | elevated | false |
| 421 | DescribeEventSubscriptions | Redshift | elevated | false |
| 422 | DescribeEvents | Redshift | elevated | false |
| 423 | DescribeHsmClientCertificates | Redshift | elevated | false |
| 424 | DescribeHsmConfigurations | Redshift | elevated | false |
| 425 | DescribeLoggingStatus | Redshift | elevated | false |
| 426 | DescribeOrderableClusterOptions | Redshift | elevated | false |
| 427 | DescribeReservedNodeOfferings | Redshift | elevated | false |
| 428 | DescribeReservedNodes | Redshift | elevated | false |
| 429 | DescribeResize | Redshift | elevated | false |
| 430 | DisableLogging | Redshift | severe | false |
| 431 | DisableSnapshotCopy | Redshift | severe | true |
| 432 | EnableLogging | Redshift | low | true |
| 433 | EnableSnapshotCopy | Redshift | low | true |
| 434 | ModifyCluster | Redshift | elevated | true |
| 435 | ModifyClusterParameterGroup | Redshift | elevated | true |
| 436 | ModifyClusterSubnetGroup | Redshift | elevated | true |
| 437 | ModifyEventSubscription | Redshift | elevated | true |
| 438 | ModifySnapshotCopyRetentionPeriod | Redshift | elevated | true |
| 439 | PurchaseReservedNodeOffering | Redshift | low | true |
| 440 | RebootCluster | Redshift | severe | true |
| 441 | ResetClusterParameterGroup | Redshift | severe | true |
| 442 | RestoreFromClusterSnapshot | Redshift | low | true |
| 443 | RevokeClusterSecurityGroupIngress | Redshift | severe | true |
| 444 | RevokeSnapshotAccess | Redshift | severe | true |
| 445 | RotateEncryptionKey | Redshift | low | true |
| 446 | CancelUpdateStack | CloudFormation | severe | true |
| 447 | CreateStack | CloudFormation | low | true |
| 448 | DeleteStack | CloudFormation | severe | true |
| 449 | DescribeStackEvents | CloudFormation | elevated | false |
| 450 | DescribeStackResource | CloudFormation | elevated | false |
| 451 | DescribeStackResources | CloudFormation | elevated | false |
| 452 | DescribeStacks | CloudFormation | elevated | false |
| 453 | EstimateTemplateCost | CloudFormation | low | true |
| 454 | GetStackPolicy | CloudFormation | elevated | true |
| 455 | GetTemplate | CloudFormation | elevated | true |
| 456 | ListStackResources | CloudFormation | elevated | false |
| 457 | ListStacks | CloudFormation | elevated | false |
| 458 | SetStackPolicy | CloudFormation | low | true |
| 459 | UpdateStack | CloudFormation | elevated | true |
| 460 | ValidateTemplate | CloudFormation | low | true |
| 461 | CreateTrail | CloudTrail | low | true |
| 462 | DeleteTrail | CloudTrail | severe | true |
| 463 | DescribeTrails | CloudTrail | elevated | false |
| 464 | GetTrailStatus | CloudTrail | elevated | true |
| 465 | StartLogging | CloudTrail | low | true |
| 466 | StopLogging | CloudTrail | severe | true |
| 467 | UpdateTrail | CloudTrail | elevated | true |
| 468 | CheckDNSAvailability | Elastic Beanstalk | low | true |
| 469 | CreateApplication | Elastic Beanstalk | low | true |
| 470 | CreateApplicationVersion | Elastic Beanstalk | low | true |
| 471 | CreateConfigurationTemplate | Elastic Beanstalk | low | true |
| 472 | CreateEnvironment | Elastic Beanstalk | low | true |
| 473 | CreateStorageLocation | Elastic Beanstalk | low | true |
| 474 | DeleteApplication | Elastic Beanstalk | severe | true |
| 475 | DeleteApplicationVersion | Elastic Beanstalk | severe | true |
| 476 | DeleteConfigurationTemplate | Elastic Beanstalk | severe | true |
| 477 | DeleteEnvironmentConfiguration | Elastic Beanstalk | severe | true |
| 478 | DescribeApplicationVersions | Elastic Beanstalk | elevated | false |
| 479 | DescribeApplications | Elastic Beanstalk | elevated | false |
| 480 | DescribeConfigurationOptions | Elastic Beanstalk | elevated | false |
| 481 | DescribeConfigurationSettings | Elastic Beanstalk | elevated | false |
| 482 | DescribeEnvironmentResources | Elastic Beanstalk | elevated | false |
| 483 | DescribeEnvironments | Elastic Beanstalk | elevated | false |
| 484 | DescribeEvents | Elastic Beanstalk | elevated | false |
| 485 | ListAvailableSolutionStacks | Elastic Beanstalk | elevated | false |
| 486 | RebuildEnvironment | Elastic Beanstalk | low | true |
| 487 | RequestEnvironmentInfo | Elastic Beanstalk | low | true |
| 488 | RestartAppServer | Elastic Beanstalk | low | true |
| 489 | RetrieveEnvironmentInfo | Elastic Beanstalk | low | true |
| 490 | SwapEnvironmentCNAMEs | Elastic Beanstalk | low | true |
| 491 | TerminateEnvironment | Elastic Beanstalk | severe | true |
| 492 | UpdateApplication | Elastic Beanstalk | elevated | true |
| 493 | UpdateApplicationVersion | Elastic Beanstalk | elevated | true |
| 494 | UpdateConfigurationTemplate | Elastic Beanstalk | elevated | true |
| 495 | UpdateEnvironment | Elastic Beanstalk | elevated | true |
| 496 | ValidateConfigurationSettings | Elastic Beanstalk | low | true |
| 497 | AssignVolume | OpsWorks | low | true |
| 498 | AssociateElasticIp | OpsWorks | low | true |
| 499 | AttachElasticLoadBalancer | OpsWorks | low | true |
| 500 | CloneStack | OpsWorks | low | true |
| 501 | CreateApp | OpsWorks | low | true |
| 502 | CreateDeployment | OpsWorks | low | true |
| 503 | CreateInstance | OpsWorks | low | true |
| 504 | CreateLayer | OpsWorks | low | true |
| 505 | CreateStack | OpsWorks | low | true |
| 506 | CreateUserProfile | OpsWorks | low | true |
| 507 | DeleteApp | OpsWorks | severe | true |
| 508 | DeleteInstance | OpsWorks | severe | true |
| 509 | DeleteLayer | OpsWorks | severe | true |
| 510 | DeleteStack | OpsWorks | severe | true |
| 511 | DeleteUserProfile | OpsWorks | severe | true |
| 512 | DeregisterElasticIp | OpsWorks | severe | true |
| 513 | DeregisterRdsDbInstance | OpsWorks | severe | true |
| 514 | DeregisterVolume | OpsWorks | severe | true |
| 515 | DescribeApps | OpsWorks | elevated | false |
| 516 | DescribeCommands | OpsWorks | elevated | false |
| 517 | DescribeDeployments | OpsWorks | elevated | false |
| 518 | DescribeElasticIps | OpsWorks | elevated | false |
| 519 | DescribeElasticLoadBalancers | OpsWorks | elevated | false |
| 520 | DescribeInstances | OpsWorks | elevated | false |
| 521 | DescribeLayers | OpsWorks | elevated | false |
| 522 | DescribeLoadBasedAutoScaling | OpsWorks | elevated | false |
| 523 | DescribeMyUserProfile | OpsWorks | elevated | false |
| 524 | DescribePermissions | OpsWorks | elevated | false |
| 525 | DescribeRaidArrays | OpsWorks | elevated | false |
| 526 | DescribeRdsDbInstances | OpsWorks | elevated | false |
| 527 | DescribeServiceErrors | OpsWorks | elevated | false |
| 528 | DescribeStackSummary | OpsWorks | elevated | false |
| 529 | DescribeStacks | OpsWorks | elevated | false |
| 530 | DescribeTimeBasedAutoScaling | OpsWorks | elevated | false |
| 531 | DescribeUserProfiles | OpsWorks | elevated | false |
| 532 | DescribeVolumes | OpsWorks | elevated | false |
| 533 | DetachElasticLoadBalancer | OpsWorks | severe | true |
| 534 | DisassociateElasticIp | OpsWorks | severe | true |
| 535 | GetHostnameSuggestion | OpsWorks | elevated | true |
| 536 | RebootInstance | OpsWorks | severe | true |
| 537 | RegisterElasticIp | OpsWorks | low | true |
| 538 | RegisterRdsDbInstance | OpsWorks | low | true |
| 539 | RegisterVolume | OpsWorks | low | true |
| 540 | SetLoadBasedAutoScaling | OpsWorks | low | true |
| 541 | SetPermission | OpsWorks | low | true |
| 542 | SetTimeBasedAutoScaling | OpsWorks | low | true |
| 543 | StartInstance | OpsWorks | low | true |
| 544 | StartStack | OpsWorks | low | true |
| 545 | StopInstance | OpsWorks | severe | true |
| 546 | StopStack | OpsWorks | severe | true |
| 547 | UnassignVolume | OpsWorks | severe | true |
| 548 | UpdateApp | OpsWorks | elevated | true |
| 549 | UpdateElasticIp | OpsWorks | elevated | true |
| 550 | UpdateInstance | OpsWorks | elevated | true |
| 551 | UpdateLayer | OpsWorks | elevated | true |
| 552 | UpdateMyUserProfile | OpsWorks | elevated | true |
| 553 | UpdateRdsDbInstance | OpsWorks | elevated | true |
| 554 | UpdateStack | OpsWorks | elevated | true |
| 555 | UpdateUserProfile | OpsWorks | elevated | true |
| 556 | UpdateVolume | OpsWorks | elevated | true |
| 557 | AddInstanceGroups | EMR | low | true |
| 558 | AddJobFlowSteps | EMR | low | true |
| 559 | AddTags | EMR | low | true |
| 560 | DescribeCluster | EMR | elevated | false |
| 561 | DescribeJobFlows | EMR | elevated | false |
| 562 | DescribeStep | EMR | elevated | false |
| 563 | ListBootstrapActions | EMR | elevated | true |
| 564 | ListClusters | EMR | elevated | true |
| 565 | ListInstanceGroups | EMR | elevated | true |
| 566 | ListInstances | EMR | elevated | true |
| 567 | ListSteps | EMR | elevated | true |
| 568 | ModifyInstanceGroups | EMR | elevated | true |
| 569 | RemoveTags | EMR | severe | true |
| 570 | RunJobFlow | EMR | low | true |
| 571 | SetTerminationProtection | EMR | low | true |
| 572 | SetVisibleToAllUsers | EMR | low | true |
| 573 | TerminateJobFlows | EMR | severe | true |
| 574 | CreateStream | Kinesis | low | true |
| 575 | DeleteStream | Kinesis | severe | true |
| 576 | DescribeStream | Kinesis | elevated | false |
| 577 | GetRecords | Kinesis | elevated | true |
| 578 | GetShardIterator | Kinesis | elevated | true |
| 579 | ListStreams | Kinesis | elevated | true |
| 580 | MergeShards | Kinesis | low | true |
| 581 | PutRecord | Kinesis | low | true |
| 582 | SplitShard | Kinesis | low | true |
| 583 | ConsoleLogin | User | elevated | true |
| 584 | DeleteObject | S3 Data Event | ||
| 585 | DeleteMultipleObjects | S3 Data Event | ||
| 586 | GetObject | S3 Data Event | ||
| 587 | GetObjectAcl | S3 Data Event | ||
| 588 | GetObjectTorrent | S3 Data Event | ||
| 589 | HeadObject | S3 Data Event | ||
| 590 | OptionsObject | S3 Data Event | ||
| 591 | PostObject | S3 Data Event | ||
| 592 | PostObjectRestore | S3 Data Event | ||
| 593 | PutObject | S3 Data Event | ||
| 594 | PutObjectAcl | S3 Data Event | ||
| 595 | PutObjectCopy | S3 Data Event | ||
| 596 | ListParts | S3 Data Event | ||
| 597 | InitiateMultipartUpload | S3 Data Event | ||
| 598 | UploadPart | S3 Data Event | ||
| 599 | UploadPartCopy | S3 Data Event | ||
| 600 | CompleteMultipartUpload | S3 Data Event | ||
| 601 | AbortMultipartUpload | S3 Data Event | ||
| 602 | CreateLogStream | |||
| 603 | UpdateInstanceInformation | |||
| 604 | CheckMfa | |||
| 605 | DeliverConfigSnapshot | |||
| 606 | CreateBucket | |||
| 607 | PutBucketAcl | |||
| 608 | PutBucketLogging | |||
| 609 | LookupEvents | |||
| 610 | Subscribe | |||
| 611 | PutConfigRule | |||
| 612 | PutEvaluations | |||
| 613 | SwitchRole | |||
| 614 | PutSubscriptionFilter | |||
| 615 | RenewRole |