acm-pca:createpermission
acm-pca:deletepermission
cloudformation:setstackpolicy
cloudsearch:updateserviceaccesspolicies
codestar:associateteammember
codestar:createproject
codestar:deleteproject
codestar:disassociateteammember
codestar:updateteammember
deeplens:associateserviceroletoaccount
ecr:setrepositorypolicy
elasticmapreduce:putblockpublicaccessconfiguration
glacier:abortvaultlock
glacier:completevaultlock
glacier:deletevaultaccesspolicy
glacier:initiatevaultlock
glacier:setdataretrievalpolicy
glacier:setvaultaccesspolicy
greengrass:associateserviceroletoaccount
iam:attachgrouppolicy
iam:attachrolepolicy
iam:attachuserpolicy
iam:createpolicy
iam:createpolicyversion
iam:deleteaccountpasswordpolicy
iam:deletegrouppolicy
iam:deletepolicy
iam:deletepolicyversion
iam:deleterolepermissionsboundary
iam:deleterolepolicy
iam:deleteuserpermissionsboundary
iam:deleteuserpolicy
iam:detachgrouppolicy
iam:detachrolepolicy
iam:detachuserpolicy
iam:putgrouppolicy
iam:putrolepermissionsboundary
iam:putrolepolicy
iam:putuserpermissionsboundary
iam:putuserpolicy
iam:setdefaultpolicyversion
iam:updateassumerolepolicy
iam:addclientidtoopenidconnectprovider
iam:addroletoinstanceprofile
iam:addusertogroup
iam:changepassword
iam:createaccesskey
iam:createaccountalias
iam:creategroup
iam:createinstanceprofile
iam:createloginprofile
iam:createopenidconnectprovider
iam:createrole
iam:createsamlprovider
iam:createservicelinkedrole
iam:createservicespecificcredential
iam:createuser
iam:createvirtualmfadevice
iam:deactivatemfadevice
iam:deleteaccesskey
iam:deleteaccountalias
iam:deletegroup
iam:deleteinstanceprofile
iam:deleteloginprofile
iam:deleteopenidconnectprovider
iam:deleterole
iam:deletesamlprovider
iam:deletesshpublickey
iam:deleteservercertificate
iam:deleteservicelinkedrole
iam:deleteservicespecificcredential
iam:deletesigningcertificate
iam:deleteuser
iam:deletevirtualmfadevice
iam:enablemfadevice
iam:passrole
iam:removeclientidfromopenidconnectprovider
iam:removerolefrominstanceprofile
iam:removeuserfromgroup
iam:resetservicespecificcredential
iam:resyncmfadevice
iam:setsecuritytokenservicepreferences
iam:updateaccesskey
iam:updateaccountpasswordpolicy
iam:updategroup
iam:updateloginprofile
iam:updateopenidconnectproviderthumbprint
iam:updaterole
iam:updateroledescription
iam:updatesamlprovider
iam:updatesshpublickey
iam:updateservercertificate
iam:updateservicespecificcredential
iam:updatesigningcertificate
iam:updateuser
iam:uploadsshpublickey
iam:uploadservercertificate
iam:uploadsigningcertificate
iot:attachpolicy
iot:attachprincipalpolicy
iot:detachpolicy
iot:detachprincipalpolicy
iot:setdefaultauthorizer
iot:setdefaultpolicyversion
kms:creategrant
kms:putkeypolicy
kms:retiregrant
kms:revokegrant
lakeformation:batchgrantpermissions
lakeformation:batchrevokepermissions
lakeformation:grantpermissions
lakeformation:putdatalakesettings
lakeformation:revokepermissions
lambda:addlayerversionpermission
lambda:addpermission
lambda:enablereplication
lambda:removelayerversionpermission
lambda:removepermission
license-manager:updateservicesettings
mediastore:deletecontainerpolicy
mediastore:putcontainerpolicy
opsworks:setpermission
opsworks:updateuserprofile
rds:authorizedbsecuritygroupingress
redshift:authorizeclustersecuritygroupingress
redshift:authorizesnapshotaccess
redshift:createclusteruser
redshift:createsnapshotcopygrant
redshift:joingroup
redshift:modifyclusteriamroles
redshift:revokeclustersecuritygroupingress
redshift:revokesnapshotaccess
redshift:rotateencryptionkey
s3:deletebucketpolicy
s3:objectowneroverridetobucketowner
s3:putaccountpublicaccessblock
s3:putbucketacl
s3:putbucketpolicy
s3:putbucketpublicaccessblock
s3:putobjectacl
s3:putobjectversionacl
secretsmanager:deleteresourcepolicy
secretsmanager:putresourcepolicy
servicecatalog:createportfolioshare
servicecatalog:deleteportfolioshare
sns:addpermission
sns:removepermission
sqs:addpermission
sqs:removepermission
waf:createwebacl
waf:deletepermissionpolicy
waf:deletewebacl
waf:putpermissionpolicy
waf:updatewebacl
waf-regional:createwebacl
waf-regional:deletepermissionpolicy
waf-regional:deletewebacl
waf-regional:putpermissionpolicy
waf-regional:updatewebacl
xray:getencryptionconfig
xray:putencryptionconfig
