-
Notifications
You must be signed in to change notification settings - Fork 0
/
aws-security-events.txt
925 lines (925 loc) · 28 KB
/
aws-security-events.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
access-analyzer:ApplyArchiveRule
access-analyzer:CancelPolicyGeneration
access-analyzer:CreateAccessPreview
access-analyzer:CreateAnalyzer
access-analyzer:CreateArchiveRule
access-analyzer:DeleteAnalyzer
access-analyzer:DeleteArchiveRule
access-analyzer:StartPolicyGeneration
access-analyzer:StartResourceScan
access-analyzer:UpdateArchiveRule
access-analyzer:UpdateFindings
account:CloseAccount
account:DeleteAlternateContact
account:DisableRegion
account:EnableRegion
account:PutAlternateContact
account:PutChallengeQuestions
account:PutContactInformation
acm-pca:CreateCertificateAuthority
acm-pca:CreateCertificateAuthorityAuditReport
acm-pca:CreatePermission
acm-pca:DeleteCertificateAuthority
acm-pca:DeletePermission
acm-pca:DeletePolicy
acm-pca:ImportCertificateAuthorityCertificate
acm-pca:IssueCertificate
acm-pca:PutPolicy
acm-pca:RestoreCertificateAuthority
acm-pca:RevokeCertificate
acm-pca:UpdateCertificateAuthority
acm:AddTagsToCertificate
acm:DeleteCertificate
acm:DescribeCertificate
acm:ExportCertificate
acm:ImportCertificate
acm:PutAccountConfiguration
acm:RemoveTagsFromCertificate
acm:RenewCertificate
acm:RequestCertificate
acm:UpdateCertificateOptions
apigateway:AddCertificateToDomain
apigateway:RemoveCertificateFromDomain
apigateway:SetWebACL
apigateway:UpdateRestApiPolicy
auditmanager:BatchDeleteDelegationByAssessment
auditmanager:BatchDisassociateAssessmentReportEvidence
auditmanager:CreateAssessment
auditmanager:CreateAssessmentFramework
auditmanager:CreateAssessmentReport
auditmanager:CreateControl
auditmanager:DeleteAssessment
auditmanager:DeleteAssessmentFramework
auditmanager:DeleteAssessmentFrameworkShare
auditmanager:DeleteAssessmentReport
auditmanager:DeleteControl
auditmanager:DeregisterAccount
auditmanager:DeregisterOrganizationAdminAccount
auditmanager:DisassociateAssessmentReportEvidenceFolder
auditmanager:RegisterAccount
auditmanager:RegisterOrganizationAdminAccount
auditmanager:StartAssessmentFrameworkShare
auditmanager:UpdateAssessment
auditmanager:UpdateAssessmentControl
auditmanager:UpdateAssessmentControlSetStatus
auditmanager:UpdateAssessmentFramework
auditmanager:UpdateAssessmentFrameworkShare
auditmanager:UpdateAssessmentStatus
auditmanager:UpdateControl
auditmanager:UpdateSettings
cloudformation:DeleteStack
cloudformation:DeleteStackSet
cloudhsm:CopyBackupToRegion
cloudhsm:CreateCluster
cloudhsm:CreateHapg
cloudhsm:CreateHsm
cloudhsm:CreateLunaClient
cloudhsm:DeleteBackup
cloudhsm:DeleteCluster
cloudhsm:DeleteHapg
cloudhsm:DeleteHsm
cloudhsm:DeleteLunaClient
cloudhsm:ModifyBackupAttributes
cloudhsm:ModifyCluster
cloudhsm:ModifyHapg
cloudhsm:ModifyHsm
cloudhsm:ModifyLunaClient
cloudhsm:RestoreBackup
cloudtrail:CreateTrail
cloudtrail:DeleteTrail
cloudtrail:DeregisterOrganizationDelegatedAdmin
cloudtrail:DisableFederation
cloudtrail:EnableFederation
cloudtrail:RegisterOrganizationDelegatedAdmin
cloudtrail:UpdateTrail
cloudwatch:DeleteAlarms
cloudwatch:DeleteAnomalyDetector
cloudwatch:DeleteDashboards
cloudwatch:DeleteInsightRules
cloudwatch:DeleteMetricStream
cloudwatch:DeleteServiceLevelObjective
cloudwatch:DisableAlarmActions
cloudwatch:DisableInsightRules
cloudwatch:EnableAlarmActions
cloudwatch:EnableInsightRules
cloudwatch:EnableTopologyDiscovery
cloudwatch:GenerateQuery
cloudwatch:PutAnomalyDetector
cloudwatch:PutCompositeAlarm
cloudwatch:PutDashboard
cloudwatch:PutInsightRule
cloudwatch:PutManagedInsightRules
cloudwatch:PutMetricAlarm
cloudwatch:PutMetricData
cloudwatch:PutMetricStream
cloudwatch:SetAlarmState
cloudwatch:StartMetricStreams
cloudwatch:StopMetricStreams
cloudwatch:UpdateServiceLevelObjective
config:DeleteAggregationAuthorization
config:DeleteConfigRule
config:DeleteConfigurationAggregator
config:DeleteConfigurationRecorder
config:DeleteConformancePack
config:DeleteDeliveryChannel
config:DeleteEvaluationResults
config:DeleteOrganizationConfigRule
config:DeleteOrganizationConformancePack
config:DeletePendingAggregationRequest
config:DeleteRemediationConfiguration
config:DeleteRemediationExceptions
config:DeleteResourceConfig
config:DeleteRetentionConfiguration
config:DeleteStoredQuery
config:PutAggregationAuthorization
config:PutConfigRule
config:PutConfigurationAggregator
config:PutConfigurationRecorder
config:PutConformancePack
config:PutDeliveryChannel
config:PutEvaluations
config:PutExternalEvaluation
config:PutOrganizationConfigRule
config:PutOrganizationConformancePack
config:PutRemediationConfigurations
config:PutRemediationExceptions
config:PutResourceConfig
config:PutRetentionConfiguration
config:PutStoredQuery
config:StartConfigRulesEvaluation
config:StartConfigurationRecorder
config:StartRemediationExecution
config:StartResourceEvaluation
config:StopConfigurationRecorder
controltower:CreateLandingZone
controltower:CreateManagedAccount
controltower:DeleteLandingZone
controltower:DeregisterManagedAccount
controltower:DeregisterOrganizationalUnit
controltower:DisableBaseline
controltower:DisableControl
controltower:DisableGuardrail
controltower:EnableBaseline
controltower:EnableControl
controltower:EnableGuardrail
controltower:ManageOrganizationalUnit
controltower:ResetEnabledBaseline
controltower:ResetLandingZone
controltower:SetupLandingZone
controltower:UpdateAccountFactoryConfig
controltower:UpdateEnabledBaseline
controltower:UpdateEnabledControl
controltower:UpdateLandingZone
detective:AcceptInvitation
detective:CreateGraph
detective:CreateMembers
detective:DeleteGraph
detective:DeleteMembers
detective:DisableOrganizationAdminAccount
detective:DisassociateMembership
detective:EnableOrganizationAdminAccount
detective:RejectInvitation
detective:StartInvestigation
detective:StartMonitoringMember
detective:UpdateDatasourcePackages
detective:UpdateInvestigationState
detective:UpdateOrganizationConfiguration
fms:AssociateAdminAccount
fms:AssociateThirdPartyFirewall
fms:BatchAssociateResource
fms:BatchDisassociateResource
fms:DeleteAppsList
fms:DeleteNotificationChannel
fms:DeletePolicy
fms:DeleteProtocolsList
fms:DeleteResourceSet
fms:DisassociateAdminAccount
fms:DisassociateThirdPartyFirewall
fms:PutAdminAccount
fms:PutAppsList
fms:PutNotificationChannel
fms:PutPolicy
fms:PutProtocolsList
fms:PutResourceSet
guardduty:AcceptAdministratorInvitation
guardduty:AcceptInvitation
guardduty:ArchiveFindings
guardduty:CreateDetector
guardduty:CreateFilter
guardduty:CreateIPSet
guardduty:CreateMembers
guardduty:CreatePublishingDestination
guardduty:CreateSampleFindings
guardduty:CreateThreatIntelSet
guardduty:DeclineInvitations
guardduty:DeleteDetector
guardduty:DeleteFilter
guardduty:DeleteIPSet
guardduty:DeleteInvitations
guardduty:DeleteMembers
guardduty:DeletePublishingDestination
guardduty:DeleteThreatIntelSet
guardduty:DisableOrganizationAdminAccount
guardduty:DisassociateFromAdministratorAccount
guardduty:DisassociateFromMasterAccount
guardduty:DisassociateMembers
guardduty:EnableOrganizationAdminAccount
guardduty:InviteMembers
guardduty:StartMalwareScan
guardduty:StartMonitoringMembers
guardduty:StopMonitoringMembers
guardduty:UnarchiveFindings
guardduty:UpdateDetector
guardduty:UpdateFilter
guardduty:UpdateFindingsFeedback
guardduty:UpdateIPSet
guardduty:UpdateMalwareScanSettings
guardduty:UpdateMemberDetectors
guardduty:UpdateOrganizationConfiguration
guardduty:UpdatePublishingDestination
guardduty:UpdateThreatIntelSet
iam:AddClientIDToOpenIDConnectProvider
iam:AddRoleToInstanceProfile
iam:AddUserToGroup
iam:AttachGroupPolicy
iam:AttachRolePolicy
iam:AttachUserPolicy
iam:ChangePassword
iam:CreateAccessKey
iam:CreateAccountAlias
iam:CreateGroup
iam:CreateInstanceProfile
iam:CreateLoginProfile
iam:CreateOpenIDConnectProvider
iam:CreatePolicy
iam:CreatePolicyVersion
iam:CreateRole
iam:CreateSAMLProvider
iam:CreateServiceLinkedRole
iam:CreateServiceSpecificCredential
iam:CreateUser
iam:CreateVirtualMFADevice
iam:DeactivateMFADevice
iam:DeleteAccessKey
iam:DeleteAccountAlias
iam:DeleteAccountPasswordPolicy
iam:DeleteCloudFrontPublicKey
iam:DeleteGroup
iam:DeleteGroupPolicy
iam:DeleteInstanceProfile
iam:DeleteLoginProfile
iam:DeleteOpenIDConnectProvider
iam:DeletePolicy
iam:DeletePolicyVersion
iam:DeleteRole
iam:DeleteRolePermissionsBoundary
iam:DeleteRolePolicy
iam:DeleteSAMLProvider
iam:DeleteSSHPublicKey
iam:DeleteServerCertificate
iam:DeleteServiceLinkedRole
iam:DeleteServiceSpecificCredential
iam:DeleteSigningCertificate
iam:DeleteUser
iam:DeleteUserPermissionsBoundary
iam:DeleteUserPolicy
iam:DeleteVirtualMFADevice
iam:DetachGroupPolicy
iam:DetachRolePolicy
iam:DetachUserPolicy
iam:EnableMFADevice
iam:PassRole
iam:PutGroupPolicy
iam:PutRolePermissionsBoundary
iam:PutRolePolicy
iam:PutUserPermissionsBoundary
iam:PutUserPolicy
iam:RemoveClientIDFromOpenIDConnectProvider
iam:RemoveRoleFromInstanceProfile
iam:RemoveUserFromGroup
iam:ResetServiceSpecificCredential
iam:ResyncMFADevice
iam:SetDefaultPolicyVersion
iam:SetSTSRegionalEndpointStatus
iam:SetSecurityTokenServicePreferences
iam:UpdateAccessKey
iam:UpdateAccountEmailAddress
iam:UpdateAccountName
iam:UpdateAccountPasswordPolicy
iam:UpdateAssumeRolePolicy
iam:UpdateCloudFrontPublicKey
iam:UpdateGroup
iam:UpdateLoginProfile
iam:UpdateOpenIDConnectProviderThumbprint
iam:UpdateRole
iam:UpdateRoleDescription
iam:UpdateSAMLProvider
iam:UpdateSSHPublicKey
iam:UpdateServerCertificate
iam:UpdateServiceSpecificCredential
iam:UpdateSigningCertificate
iam:UpdateUser
iam:UploadCloudFrontPublicKey
iam:UploadSSHPublicKey
iam:UploadServerCertificate
iam:UploadSigningCertificate
inspector2:AssociateMember
inspector2:BatchUpdateMemberEc2DeepInspectionStatus
inspector2:CancelFindingsReport
inspector2:CancelSbomExport
inspector2:CreateCisScanConfiguration
inspector2:CreateFilter
inspector2:CreateFindingsReport
inspector2:CreateSbomExport
inspector2:DeleteCisScanConfiguration
inspector2:DeleteFilter
inspector2:Disable
inspector2:DisableDelegatedAdminAccount
inspector2:DisassociateMember
inspector2:Enable
inspector2:EnableDelegatedAdminAccount
inspector2:ResetEncryptionKey
inspector2:UpdateCisScanConfiguration
inspector2:UpdateConfiguration
inspector2:UpdateEc2DeepInspectionConfiguration
inspector2:UpdateEncryptionKey
inspector2:UpdateFilter
inspector2:UpdateOrgEc2DeepInspectionConfiguration
inspector2:UpdateOrganizationConfiguration
inspector:AddAttributesToFindings
inspector:CreateAssessmentTarget
inspector:CreateAssessmentTemplate
inspector:CreateExclusionsPreview
inspector:CreateResourceGroup
inspector:DeleteAssessmentRun
inspector:DeleteAssessmentTarget
inspector:DeleteAssessmentTemplate
inspector:RegisterCrossAccountAccessRole
inspector:RemoveAttributesFromFindings
inspector:StartAssessmentRun
inspector:StopAssessmentRun
inspector:SubscribeToEvent
inspector:UnsubscribeFromEvent
inspector:UpdateAssessmentTarget
kms:CancelKeyDeletion
kms:ConnectCustomKeyStore
kms:CreateAlias
kms:CreateCustomKeyStore
kms:CreateGrant
kms:CreateKey
kms:Decrypt
kms:DeleteAlias
kms:DeleteCustomKeyStore
kms:DeleteImportedKeyMaterial
kms:DescribeCustomKeyStores
kms:DisableKey
kms:DisableKeyRotation
kms:DisconnectCustomKeyStore
kms:EnableKey
kms:EnableKeyRotation
kms:Encrypt
kms:GenerateDataKey
kms:GenerateDataKeyPair
kms:GenerateDataKeyPairWithoutPlaintext
kms:GenerateDataKeyWithoutPlaintext
kms:GenerateMac
kms:GenerateRandom
kms:ImportKeyMaterial
kms:PutKeyPolicy
kms:ReEncryptFrom
kms:ReEncryptTo
kms:ReplicateKey
kms:RetireGrant
kms:RevokeGrant
kms:RotateKeyOnDemand
kms:ScheduleKeyDeletion
kms:Sign
kms:SynchronizeMultiRegionKey
kms:UpdateAlias
kms:UpdateCustomKeyStore
kms:UpdateKeyDescription
kms:UpdatePrimaryRegion
logs:AssociateKmsKey
logs:CancelExportTask
logs:CreateDelivery
logs:CreateExportTask
logs:CreateLogAnomalyDetector
logs:CreateLogDelivery
logs:CreateLogGroup
logs:CreateLogStream
logs:DeleteAccountPolicy
logs:DeleteDataProtectionPolicy
logs:DeleteDelivery
logs:DeleteDeliveryDestination
logs:DeleteDeliveryDestinationPolicy
logs:DeleteDeliverySource
logs:DeleteDestination
logs:DeleteLogAnomalyDetector
logs:DeleteLogDelivery
logs:DeleteLogGroup
logs:DeleteLogStream
logs:DeleteMetricFilter
logs:DeleteQueryDefinition
logs:DeleteResourcePolicy
logs:DeleteRetentionPolicy
logs:DeleteSubscriptionFilter
logs:DisassociateKmsKey
logs:FilterLogEvents
logs:PutAccountPolicy
logs:PutDataProtectionPolicy
logs:PutDeliveryDestination
logs:PutDeliveryDestinationPolicy
logs:PutDeliverySource
logs:PutDestination
logs:PutDestinationPolicy
logs:PutLogEvents
logs:PutMetricFilter
logs:PutQueryDefinition
logs:PutResourcePolicy
logs:PutRetentionPolicy
logs:PutSubscriptionFilter
logs:StartLiveTail
logs:StartQuery
logs:StopLiveTail
logs:StopQuery
logs:Unmask
logs:UpdateAnomaly
logs:UpdateLogAnomalyDetector
logs:UpdateLogDelivery
macie2:AcceptInvitation
macie2:CreateAllowList
macie2:CreateClassificationJob
macie2:CreateCustomDataIdentifier
macie2:CreateFindingsFilter
macie2:CreateInvitations
macie2:CreateMember
macie2:CreateSampleFindings
macie2:DeclineInvitations
macie2:DeleteAllowList
macie2:DeleteCustomDataIdentifier
macie2:DeleteFindingsFilter
macie2:DeleteInvitations
macie2:DeleteMember
macie2:DisableMacie
macie2:DisableOrganizationAdminAccount
macie2:DisassociateFromAdministratorAccount
macie2:DisassociateFromMasterAccount
macie2:DisassociateMember
macie2:EnableMacie
macie2:EnableOrganizationAdminAccount
macie2:PutClassificationExportConfiguration
macie2:PutFindingsPublicationConfiguration
macie2:UpdateAllowList
macie2:UpdateAutomatedDiscoveryConfiguration
macie2:UpdateClassificationJob
macie2:UpdateClassificationScope
macie2:UpdateFindingsFilter
macie2:UpdateMacieSession
macie2:UpdateMemberSession
macie2:UpdateOrganizationConfiguration
macie2:UpdateResourceProfile
macie2:UpdateResourceProfileDetections
macie2:UpdateRevealConfiguration
macie2:UpdateSensitivityInspectionTemplate
network-firewall:AssociateFirewallPolicy
network-firewall:AssociateSubnets
network-firewall:CreateFirewall
network-firewall:CreateFirewallPolicy
network-firewall:CreateRuleGroup
network-firewall:CreateTLSInspectionConfiguration
network-firewall:DeleteFirewall
network-firewall:DeleteFirewallPolicy
network-firewall:DeleteResourcePolicy
network-firewall:DeleteRuleGroup
network-firewall:DeleteTLSInspectionConfiguration
network-firewall:DisassociateSubnets
network-firewall:PutResourcePolicy
network-firewall:UpdateFirewallDeleteProtection
network-firewall:UpdateFirewallDescription
network-firewall:UpdateFirewallEncryptionConfiguration
network-firewall:UpdateFirewallPolicy
network-firewall:UpdateFirewallPolicyChangeProtection
network-firewall:UpdateLoggingConfiguration
network-firewall:UpdateRuleGroup
network-firewall:UpdateSubnetChangeProtection
network-firewall:UpdateTLSInspectionConfiguration
organizations:AcceptHandshake
organizations:AttachPolicy
organizations:CancelHandshake
organizations:CloseAccount
organizations:CreateAccount
organizations:CreateGovCloudAccount
organizations:CreateOrganization
organizations:CreateOrganizationalUnit
organizations:CreatePolicy
organizations:DeclineHandshake
organizations:DeleteOrganization
organizations:DeleteOrganizationalUnit
organizations:DeletePolicy
organizations:DeleteResourcePolicy
organizations:DeregisterDelegatedAdministrator
organizations:DetachPolicy
organizations:DisableAWSServiceAccess
organizations:DisablePolicyType
organizations:EnableAWSServiceAccess
organizations:EnableAllFeatures
organizations:EnablePolicyType
organizations:InviteAccountToOrganization
organizations:LeaveOrganization
organizations:MoveAccount
organizations:PutResourcePolicy
organizations:RegisterDelegatedAdministrator
organizations:RemoveAccountFromOrganization
organizations:UpdateOrganizationalUnit
organizations:UpdatePolicy
route53:ActivateKeySigningKey
route53:AssociateVPCWithHostedZone
route53:ChangeCidrCollection
route53:ChangeResourceRecordSets
route53:ChangeTagsForResource
route53:CreateCidrCollection
route53:CreateHealthCheck
route53:CreateHostedZone
route53:CreateKeySigningKey
route53:CreateQueryLoggingConfig
route53:CreateReusableDelegationSet
route53:CreateTrafficPolicy
route53:CreateTrafficPolicyInstance
route53:CreateTrafficPolicyVersion
route53:CreateVPCAssociationAuthorization
route53:DeactivateKeySigningKey
route53:DeleteCidrCollection
route53:DeleteHealthCheck
route53:DeleteHostedZone
route53:DeleteKeySigningKey
route53:DeleteQueryLoggingConfig
route53:DeleteReusableDelegationSet
route53:DeleteTrafficPolicy
route53:DeleteTrafficPolicyInstance
route53:DeleteVPCAssociationAuthorization
route53:DisableHostedZoneDNSSEC
route53:DisassociateVPCFromHostedZone
route53:EnableHostedZoneDNSSEC
route53:UpdateHealthCheck
route53:UpdateHostedZoneComment
route53:UpdateTrafficPolicyComment
route53:UpdateTrafficPolicyInstance
route53domains:AcceptDomainTransferFromAnotherAwsAccount
route53domains:AssociateDelegationSignerToDomain
route53domains:CancelDomainTransferToAnotherAwsAccount
route53domains:DeleteDomain
route53domains:DisableDomainAutoRenew
route53domains:DisableDomainTransferLock
route53domains:DisassociateDelegationSignerFromDomain
route53domains:EnableDomainAutoRenew
route53domains:EnableDomainTransferLock
route53domains:PushDomain
route53domains:RegisterDomain
route53domains:RejectDomainTransferFromAnotherAwsAccount
route53domains:RenewDomain
route53domains:ResendContactReachabilityEmail
route53domains:ResendOperationAuthorization
route53domains:RetrieveDomainAuthCode
route53domains:TransferDomain
route53domains:TransferDomainToAnotherAwsAccount
route53domains:UpdateDomainContact
route53domains:UpdateDomainContactPrivacy
route53domains:UpdateDomainNameservers
route53resolver:AssociateFirewallRuleGroup
route53resolver:AssociateResolverEndpointIpAddress
route53resolver:AssociateResolverQueryLogConfig
route53resolver:AssociateResolverRule
route53resolver:CreateFirewallDomainList
route53resolver:CreateFirewallRule
route53resolver:CreateFirewallRuleGroup
route53resolver:CreateOutpostResolver
route53resolver:CreateResolverEndpoint
route53resolver:CreateResolverQueryLogConfig
route53resolver:CreateResolverRule
route53resolver:DeleteFirewallDomainList
route53resolver:DeleteFirewallRule
route53resolver:DeleteFirewallRuleGroup
route53resolver:DeleteOutpostResolver
route53resolver:DeleteResolverEndpoint
route53resolver:DeleteResolverQueryLogConfig
route53resolver:DeleteResolverRule
route53resolver:DisassociateFirewallRuleGroup
route53resolver:DisassociateResolverEndpointIpAddress
route53resolver:DisassociateResolverQueryLogConfig
route53resolver:DisassociateResolverRule
route53resolver:ImportFirewallDomains
route53resolver:PutFirewallRuleGroupPolicy
route53resolver:PutResolverQueryLogConfigPolicy
route53resolver:PutResolverRulePolicy
route53resolver:UpdateFirewallConfig
route53resolver:UpdateFirewallDomains
route53resolver:UpdateFirewallRule
route53resolver:UpdateFirewallRuleGroupAssociation
route53resolver:UpdateOutpostResolver
route53resolver:UpdateResolverConfig
route53resolver:UpdateResolverDnssecConfig
route53resolver:UpdateResolverEndpoint
route53resolver:UpdateResolverRule
secretsmanager:BatchGetSecretValue
secretsmanager:CancelRotateSecret
secretsmanager:CreateSecret
secretsmanager:DeleteResourcePolicy
secretsmanager:DeleteSecret
secretsmanager:GetRandomPassword
secretsmanager:GetSecretValue
secretsmanager:PutResourcePolicy
secretsmanager:PutSecretValue
secretsmanager:RemoveRegionsFromReplication
secretsmanager:ReplicateSecretToRegions
secretsmanager:RestoreSecret
secretsmanager:RotateSecret
secretsmanager:StopReplicationToReplica
secretsmanager:UpdateSecret
secretsmanager:UpdateSecretVersionStage
secretsmanager:ValidateResourcePolicy
securityhub:AcceptAdministratorInvitation
securityhub:AcceptInvitation
securityhub:BatchDeleteAutomationRules
securityhub:BatchDisableStandards
securityhub:BatchEnableStandards
securityhub:BatchImportFindings
securityhub:BatchUpdateAutomationRules
securityhub:BatchUpdateFindings
securityhub:BatchUpdateStandardsControlAssociations
securityhub:CreateActionTarget
securityhub:CreateAutomationRule
securityhub:CreateConfigurationPolicy
securityhub:CreateFindingAggregator
securityhub:CreateInsight
securityhub:CreateMembers
securityhub:DeclineInvitations
securityhub:DeleteActionTarget
securityhub:DeleteConfigurationPolicy
securityhub:DeleteFindingAggregator
securityhub:DeleteInsight
securityhub:DeleteInvitations
securityhub:DeleteMembers
securityhub:DisableImportFindingsForProduct
securityhub:DisableOrganizationAdminAccount
securityhub:DisableSecurityHub
securityhub:DisassociateFromAdministratorAccount
securityhub:DisassociateFromMasterAccount
securityhub:DisassociateMembers
securityhub:EnableImportFindingsForProduct
securityhub:EnableOrganizationAdminAccount
securityhub:EnableSecurityHub
securityhub:InviteMembers
securityhub:SendFindingEvents
securityhub:SendInsightEvents
securityhub:StartConfigurationPolicyAssociation
securityhub:StartConfigurationPolicyDisassociation
securityhub:UpdateActionTarget
securityhub:UpdateConfigurationPolicy
securityhub:UpdateFindingAggregator
securityhub:UpdateFindings
securityhub:UpdateInsight
securityhub:UpdateOrganizationConfiguration
securityhub:UpdateSecurityControl
securityhub:UpdateSecurityHubConfiguration
securityhub:UpdateStandardsControl
securitylake:CreateAwsLogSource
securitylake:CreateCustomLogSource
securitylake:CreateDataLake
securitylake:CreateDataLakeExceptionSubscription
securitylake:CreateDataLakeOrganizationConfiguration
securitylake:CreateSubscriber
securitylake:CreateSubscriberNotification
securitylake:DeleteAwsLogSource
securitylake:DeleteCustomLogSource
securitylake:DeleteDataLake
securitylake:DeleteDataLakeExceptionSubscription
securitylake:DeleteDataLakeOrganizationConfiguration
securitylake:DeleteSubscriber
securitylake:DeleteSubscriberNotification
securitylake:DeregisterDataLakeDelegatedAdministrator
securitylake:RegisterDataLakeDelegatedAdministrator
securitylake:UpdateDataLake
securitylake:UpdateDataLakeExceptionSubscription
securitylake:UpdateSubscriber
securitylake:UpdateSubscriberNotification
shield:AssociateDRTLogBucket
shield:AssociateDRTRole
shield:AssociateHealthCheck
shield:AssociateProactiveEngagementDetails
shield:CreateProtection
shield:CreateProtectionGroup
shield:CreateSubscription
shield:DeleteProtection
shield:DeleteProtectionGroup
shield:DeleteSubscription
shield:DisableApplicationLayerAutomaticResponse
shield:DisableProactiveEngagement
shield:DisassociateDRTLogBucket
shield:DisassociateDRTRole
shield:DisassociateHealthCheck
shield:EnableApplicationLayerAutomaticResponse
shield:EnableProactiveEngagement
shield:GetSubscriptionState
shield:UpdateApplicationLayerAutomaticResponse
shield:UpdateEmergencyContactSettings
shield:UpdateProtectionGroup
shield:UpdateSubscription
sso-directory:AddMemberToGroup
sso-directory:CreateGroup
sso-directory:CreateProvisioningTenant
sso-directory:CreateUser
sso-directory:DeleteBearerToken
sso-directory:DeleteExternalIdPCertificate
sso-directory:DeleteExternalIdPConfigurationForDirectory
sso-directory:DeleteGroup
sso-directory:DeleteMfaDeviceForUser
sso-directory:DeleteProvisioningTenant
sso-directory:DeleteUser
sso-directory:DisableExternalIdPConfigurationForDirectory
sso-directory:DisableUser
sso-directory:EnableExternalIdPConfigurationForDirectory
sso-directory:EnableUser
sso-directory:ImportExternalIdPCertificate
sso-directory:RemoveMemberFromGroup
sso-directory:StartVirtualMfaDeviceRegistration
sso-directory:StartWebAuthnDeviceRegistration
sso-directory:UpdateExternalIdPConfigurationForDirectory
sso-directory:UpdateGroup
sso-directory:UpdateGroupDisplayName
sso-directory:UpdateMfaDeviceForUser
sso-directory:UpdatePassword
sso-directory:UpdateUser
sso-directory:UpdateUserName
sso:AssociateDirectory
sso:AssociateProfile
sso:AttachCustomerManagedPolicyReferenceToPermissionSet
sso:AttachManagedPolicyToPermissionSet
sso:CreateAccountAssignment
sso:CreateApplication
sso:CreateApplicationAssignment
sso:CreateApplicationInstance
sso:CreateApplicationInstanceCertificate
sso:CreateInstance
sso:CreateInstanceAccessControlAttributeConfiguration
sso:CreateManagedApplicationInstance
sso:CreatePermissionSet
sso:CreateProfile
sso:CreateTrust
sso:CreateTrustedTokenIssuer
sso:DeleteAccountAssignment
sso:DeleteApplication
sso:DeleteApplicationAccessScope
sso:DeleteApplicationAssignment
sso:DeleteApplicationAuthenticationMethod
sso:DeleteApplicationGrant
sso:DeleteApplicationInstance
sso:DeleteApplicationInstanceCertificate
sso:DeleteInlinePolicyFromPermissionSet
sso:DeleteInstance
sso:DeleteInstanceAccessControlAttributeConfiguration
sso:DeleteManagedApplicationInstance
sso:DeletePermissionSet
sso:DeletePermissionsBoundaryFromPermissionSet
sso:DeletePermissionsPolicy
sso:DeleteProfile
sso:DeleteTrustedTokenIssuer
sso:DetachCustomerManagedPolicyReferenceFromPermissionSet
sso:DetachManagedPolicyFromPermissionSet
sso:DisassociateDirectory
sso:DisassociateProfile
sso:ImportApplicationInstanceServiceProviderMetadata
sso:ProvisionPermissionSet
sso:PutApplicationAccessScope
sso:PutApplicationAssignmentConfiguration
sso:PutApplicationAuthenticationMethod
sso:PutApplicationGrant
sso:PutInlinePolicyToPermissionSet
sso:PutMfaDeviceManagementForDirectory
sso:PutPermissionsBoundaryToPermissionSet
sso:PutPermissionsPolicy
sso:UpdateApplication
sso:UpdateApplicationInstanceActiveCertificate
sso:UpdateApplicationInstanceDisplayData
sso:UpdateApplicationInstanceResponseConfiguration
sso:UpdateApplicationInstanceResponseSchemaConfiguration
sso:UpdateApplicationInstanceSecurityConfiguration
sso:UpdateApplicationInstanceServiceProviderConfiguration
sso:UpdateApplicationInstanceStatus
sso:UpdateDirectoryAssociation
sso:UpdateInstance
sso:UpdateInstanceAccessControlAttributeConfiguration
sso:UpdateManagedApplicationInstanceStatus
sso:UpdatePermissionSet
sso:UpdateProfile
sso:UpdateSSOConfiguration
sso:UpdateTrust
sso:UpdateTrustedTokenIssuer
waf-regional:AssociateWebACL
waf-regional:CreateByteMatchSet
waf-regional:CreateGeoMatchSet
waf-regional:CreateIPSet
waf-regional:CreateRateBasedRule
waf-regional:CreateRegexMatchSet
waf-regional:CreateRegexPatternSet
waf-regional:CreateRule
waf-regional:CreateRuleGroup
waf-regional:CreateSizeConstraintSet
waf-regional:CreateSqlInjectionMatchSet
waf-regional:CreateWebACL
waf-regional:CreateWebACLMigrationStack
waf-regional:CreateXssMatchSet
waf-regional:DeleteByteMatchSet
waf-regional:DeleteGeoMatchSet
waf-regional:DeleteIPSet
waf-regional:DeleteLoggingConfiguration
waf-regional:DeletePermissionPolicy
waf-regional:DeleteRateBasedRule
waf-regional:DeleteRegexMatchSet
waf-regional:DeleteRegexPatternSet
waf-regional:DeleteRule
waf-regional:DeleteRuleGroup
waf-regional:DeleteSizeConstraintSet
waf-regional:DeleteSqlInjectionMatchSet
waf-regional:DeleteWebACL
waf-regional:DeleteXssMatchSet
waf-regional:DisassociateWebACL
waf-regional:PutLoggingConfiguration
waf-regional:PutPermissionPolicy
waf-regional:UpdateByteMatchSet
waf-regional:UpdateGeoMatchSet
waf-regional:UpdateIPSet
waf-regional:UpdateRateBasedRule
waf-regional:UpdateRegexMatchSet
waf-regional:UpdateRegexPatternSet
waf-regional:UpdateRule
waf-regional:UpdateRuleGroup
waf-regional:UpdateSizeConstraintSet
waf-regional:UpdateSqlInjectionMatchSet
waf-regional:UpdateWebACL
waf-regional:UpdateXssMatchSet
waf:CreateByteMatchSet
waf:CreateGeoMatchSet
waf:CreateIPSet
waf:CreateRateBasedRule
waf:CreateRegexMatchSet
waf:CreateRegexPatternSet
waf:CreateRule
waf:CreateRuleGroup
waf:CreateSizeConstraintSet
waf:CreateSqlInjectionMatchSet
waf:CreateWebACL
waf:CreateWebACLMigrationStack
waf:CreateXssMatchSet
waf:DeleteByteMatchSet
waf:DeleteGeoMatchSet
waf:DeleteIPSet
waf:DeleteLoggingConfiguration
waf:DeletePermissionPolicy
waf:DeleteRateBasedRule
waf:DeleteRegexMatchSet
waf:DeleteRegexPatternSet
waf:DeleteRule
waf:DeleteRuleGroup
waf:DeleteSizeConstraintSet
waf:DeleteSqlInjectionMatchSet
waf:DeleteWebACL
waf:DeleteXssMatchSet
waf:PutLoggingConfiguration
waf:PutPermissionPolicy
waf:UpdateByteMatchSet
waf:UpdateGeoMatchSet
waf:UpdateIPSet
waf:UpdateRateBasedRule
waf:UpdateRegexMatchSet
waf:UpdateRegexPatternSet
waf:UpdateRule
waf:UpdateRuleGroup
waf:UpdateSizeConstraintSet
waf:UpdateSqlInjectionMatchSet
waf:UpdateWebACL
waf:UpdateXssMatchSet
wafv2:AssociateWebACL
wafv2:CreateAPIKey
wafv2:CreateIPSet
wafv2:CreateRegexPatternSet
wafv2:CreateRuleGroup
wafv2:CreateWebACL
wafv2:DeleteAPIKey
wafv2:DeleteFirewallManagerRuleGroups
wafv2:DeleteIPSet
wafv2:DeleteLoggingConfiguration
wafv2:DeletePermissionPolicy
wafv2:DeleteRegexPatternSet
wafv2:DeleteRuleGroup
wafv2:DeleteWebACL
wafv2:DisassociateFirewallManager
wafv2:DisassociateWebACL
wafv2:PutFirewallManagerRuleGroups
wafv2:PutLoggingConfiguration
wafv2:PutManagedRuleSetVersions
wafv2:PutPermissionPolicy
wafv2:UpdateIPSet
wafv2:UpdateManagedRuleSetVersionExpiryDate
wafv2:UpdateRegexPatternSet
wafv2:UpdateRuleGroup
wafv2:UpdateWebACL