a4b:AssociateContactWithAddressBook
a4b:CreateAddressBook
a4b:CreateContact
a4b:DeleteAddressBook
a4b:DeleteContact
a4b:DisassociateContactFromAddressBook
a4b:GetAddressBook
a4b:GetContact
a4b:SearchAddressBooks
a4b:SearchContacts
a4b:UpdateAddressBook
a4b:UpdateContact
acm-pca:CreateCertificateAuthority
acm-pca:CreateCertificateAuthorityAuditReport
acm-pca:DeleteCertificateAuthority
acm-pca:DescribeCertificateAuthority
acm-pca:DescribeCertificateAuthorityAuditReport
acm-pca:GetCertificate
acm-pca:GetCertificateAuthorityCertificate
acm-pca:GetCertificateAuthorityCsr
acm-pca:ImportCertificateAuthorityCertificate
acm-pca:IssueCertificate
acm-pca:ListCertificateAuthorities
acm-pca:ListTags
acm-pca:RevokeCertificate
acm-pca:TagCertificateAuthority
acm-pca:UntagCertificateAuthority
acm-pca:UpdateCertificateAuthority
acm:ExportCertificate
acm:UpdateCertificateOptions
api:DescribeServices
api:GetAttributeValues
api:GetProducts
appstream:CopyImage
autoscaling:CreateScalingPlan
autoscaling:DeleteScalingPlan
autoscaling:DeleteScalingPolicy
autoscaling:DeregisterScalableTarget
autoscaling:DescribeScalableTargets
autoscaling:DescribeScalingPlanResources
autoscaling:DescribeScalingPlans
autoscaling:DescribeScalingPolicies
autoscaling:PutScheduledAction
autoscaling:RegisterScalableTarget
budgets:CreateBudget
budgets:CreateNotification
budgets:CreateSubscriber
budgets:DeleteBudget
budgets:DeleteNotification
budgets:DeleteSubscriber
budgets:DescribeBudget
budgets:DescribeBudgets
budgets:DescribeNotificationsForBudget
budgets:DescribeSubscribersForNotification
budgets:UpdateBudget
budgets:UpdateNotification
budgets:UpdateSubscriber
ce:GetReservationCoverage
ce:GetReservationPurchaseRecommendation
cloud9:CreateEnvironmentEC
clouddirectory:GetAppliedSchemaVersion
clouddirectory:UpgradeAppliedSchema
clouddirectory:UpgradePublishedSchema
cloudformation:CreateStackInstances
cloudformation:CreateStackSet
cloudformation:DeleteStackInstances
cloudformation:DeleteStackSet
cloudformation:DescribeStackInstance
cloudformation:DescribeStackSet
cloudformation:DescribeStackSetOperation
cloudformation:ListStackInstances
cloudformation:ListStackSetOperationResults
cloudformation:ListStackSetOperations
cloudformation:ListStackSets
cloudformation:StopStackSetOperation
cloudformation:UpdateStackInstances
cloudformation:UpdateStackSet
cloudfront:CreateFieldLevelEncryptionConfig
cloudfront:CreateFieldLevelEncryptionProfile
cloudfront:CreatePublicKey
cloudfront:DeleteFieldLevelEncryptionConfig
cloudfront:DeleteFieldLevelEncryptionProfile
cloudfront:DeletePublicKey
cloudfront:DeleteServiceLinkedRole
cloudfront:GetFieldLevelEncryption
cloudfront:GetFieldLevelEncryptionConfig
cloudfront:GetFieldLevelEncryptionProfile
cloudfront:GetFieldLevelEncryptionProfileConfig
cloudfront:GetPublicKey
cloudfront:GetPublicKeyConfig
cloudfront:ListFieldLevelEncryptionConfigs
cloudfront:ListFieldLevelEncryptionProfiles
cloudfront:ListPublicKeys
cloudfront:UpdateFieldLevelEncryptionConfig
cloudfront:UpdateFieldLevelEncryptionProfile
cloudfront:UpdatePublicKey
cloudhsmv2:CreateCluster
cloudhsmv2:CreateHsm
cloudhsmv2:DeleteCluster
cloudhsmv2:DeleteHsm
cloudhsmv2:DescribeBackups
cloudhsmv2:DescribeClusters
cloudhsmv2:InitializeCluster
cloudhsmv2:ListTags
cloudhsmv2:TagResource
cloudhsmv2:UntagResource
cloudsearch:DefineRankExpression
cloudsearch:DeleteRankExpression
cloudsearch:DescribeDefaultSearchField
cloudsearch:DescribeRankExpressions
cloudsearch:DescribeStemmingOptions
cloudsearch:DescribeStopwordOptions
cloudsearch:DescribeSynonymOptions
cloudsearch:UpdateDefaultSearchField
cloudsearch:UpdateStemmingOptions
cloudsearch:UpdateStopwordOptions
cloudsearch:UpdateSynonymOptions
cloudsearchdomain:Search
cloudsearchdomain:Suggest
cloudsearchdomain:UploadDocuments
codebuild:CreateWebhook
codebuild:DeleteWebhook
codebuild:InvalidateProjectCache
codebuild:UpdateWebhook
codedeploy:DeleteGitHubAccountToken
codedeploy:PutLifecycleEventHookExecutionStatus
codestar:ListTagsForProject
codestar:TagProject
codestar:UntagProject
cognito-idp:AdminDisableProviderForUser
cognito-idp:AdminLinkProviderForUser
cognito-idp:AssociateSoftwareToken
cognito-idp:CreateIdentityProvider
cognito-idp:CreateResourceServer
cognito-idp:DeleteIdentityProvider
cognito-idp:DeleteResourceServer
cognito-idp:DeleteUserPoolDomain
cognito-idp:DescribeIdentityProvider
cognito-idp:DescribeResourceServer
cognito-idp:DescribeUserPoolDomain
cognito-idp:GetIdentityProviderByIdentifier
cognito-idp:GetSigningCertificate
cognito-idp:GetUICustomization
cognito-idp:ListIdentityProviders
cognito-idp:ListResourceServers
cognito-idp:UpdateIdentityProvider
cognito-idp:UpdateResourceServer
cognito-idp:VerifySoftwareToken
config:BatchGetResourceConfig
config:DeleteAggregationAuthorization
config:DeleteConfigurationAggregator
config:DeletePendingAggregationRequest
config:DescribeAggregateComplianceByConfigRules
config:DescribeAggregationAuthorizations
config:DescribeConfigurationAggregatorSourcesStatus
config:DescribeConfigurationAggregators
config:DescribePendingAggregationRequests
config:GetAggregateComplianceDetailsByConfigRule
config:GetAggregateConfigRuleComplianceSummary
config:GetDiscoveredResourceCounts
config:PutAggregationAuthorization
config:PutConfigurationAggregator
connect:StartOutboundVoiceContact
connect:StopContact
data:DeleteObject
data:DeleteThingShadow
data:DescribeJobExecution
data:DescribeObject
data:GetObject
data:GetPendingJobExecutions
data:GetThingShadow
data:ListItems
data:Publish
data:PutObject
data:StartNextPendingJobExecution
data:UpdateJobExecution
data:UpdateThingShadow
devicefarm:CreateInstanceProfile
devicefarm:DeleteInstanceProfile
devicefarm:GetDeviceInstance
devicefarm:GetInstanceProfile
devicefarm:ListDeviceInstances
devicefarm:ListInstanceProfiles
devicefarm:ListOfferingPromotions
devicefarm:UpdateDeviceInstance
devicefarm:UpdateInstanceProfile
directconnect:AllocateHostedConnection
directconnect:AssociateConnectionWithLag
directconnect:AssociateHostedConnection
directconnect:AssociateVirtualInterface
directconnect:CreateBGPPeer
directconnect:CreateDirectConnectGateway
directconnect:CreateDirectConnectGatewayAssociation
directconnect:CreateLag
directconnect:DeleteBGPPeer
directconnect:DeleteDirectConnectGateway
directconnect:DeleteDirectConnectGatewayAssociation
directconnect:DeleteLag
directconnect:DescribeDirectConnectGatewayAssociations
directconnect:DescribeDirectConnectGatewayAttachments
directconnect:DescribeDirectConnectGateways
directconnect:DescribeHostedConnections
directconnect:DescribeLags
directconnect:DescribeLoa
directconnect:DescribeTags
directconnect:DisassociateConnectionFromLag
directconnect:TagResource
directconnect:UntagResource
directconnect:UpdateLag
discovery:DescribeExportTasks
dms:CreateEventSubscription
dms:DeleteCertificate
dms:DescribeReplicationInstanceTaskLogs
dms:DescribeReplicationTaskAssessmentResults
dms:ImportCertificate
dms:RebootReplicationInstance
dms:ReloadTables
dms:StartReplicationTaskAssessment
ds:DescribeDomainControllers
ds:UpdateNumberOfDomainControllers
dynamodb:CreateGlobalTable
dynamodb:DescribeGlobalTable
dynamodb:ListGlobalTables
dynamodb:UpdateGlobalTable
ec2:DescribeAggregateIdFormat
ec2:DescribePrincipalIdFormat
ecr:DeleteLifecyclePolicy
ecr:GetLifecyclePolicy
ecr:GetLifecyclePolicyPreview
ecr:PutLifecyclePolicy
ecr:StartLifecyclePolicyPreview
ecs:DeleteAttributes
ecs:ListAttributes
ecs:PutAttributes
elasticache:ModifyReplicationGroupShardConfiguration
elasticache:TestFailover
elasticbeanstalk:DescribeAccountAttributes
elasticbeanstalk:ListTagsForResource
elasticbeanstalk:UpdateTagsForResource
elasticloadbalancing:AddListenerCertificates
elasticloadbalancing:DescribeAccountLimits
elasticloadbalancing:DescribeListenerCertificates
elasticloadbalancing:RemoveListenerCertificates
elasticmapreduce:AddInstanceFleet
elasticmapreduce:ListInstanceFleets
elasticmapreduce:ModifyInstanceFleet
email:CloneReceiptRuleSet
email:CreateConfigurationSet
email:CreateConfigurationSetEventDestination
email:CreateConfigurationSetTrackingOptions
email:CreateCustomVerificationEmailTemplate
email:CreateReceiptFilter
email:CreateReceiptRule
email:CreateReceiptRuleSet
email:CreateTemplate
email:DeleteConfigurationSet
email:DeleteConfigurationSetEventDestination
email:DeleteConfigurationSetTrackingOptions
email:DeleteCustomVerificationEmailTemplate
email:DeleteIdentity
email:DeleteIdentityPolicy
email:DeleteReceiptFilter
email:DeleteReceiptRule
email:DeleteReceiptRuleSet
email:DeleteTemplate
email:DeleteVerifiedEmailAddress
email:DescribeActiveReceiptRuleSet
email:DescribeConfigurationSet
email:DescribeReceiptRule
email:DescribeReceiptRuleSet
email:GetAccountSendingEnabled
email:GetCustomVerificationEmailTemplate
email:GetIdentityDkimAttributes
email:GetIdentityMailFromDomainAttributes
email:GetIdentityNotificationAttributes
email:GetIdentityPolicies
email:GetIdentityVerificationAttributes
email:GetSendQuota
email:GetSendStatistics
email:GetTemplate
email:ListConfigurationSets
email:ListCustomVerificationEmailTemplates
email:ListIdentities
email:ListIdentityPolicies
email:ListReceiptFilters
email:ListReceiptRuleSets
email:ListTemplates
email:ListVerifiedEmailAddresses
email:PutIdentityPolicy
email:ReorderReceiptRuleSet
email:SendBounce
email:SendBulkTemplatedEmail
email:SendCustomVerificationEmail
email:SendEmail
email:SendRawEmail
email:SendTemplatedEmail
email:SetActiveReceiptRuleSet
email:SetIdentityDkimEnabled
email:SetIdentityFeedbackForwardingEnabled
email:SetIdentityHeadersInNotificationsEnabled
email:SetIdentityMailFromDomain
email:SetIdentityNotificationTopic
email:SetReceiptRulePosition
email:TestRenderTemplate
email:UpdateAccountSendingEnabled
email:UpdateConfigurationSetEventDestination
email:UpdateConfigurationSetReputationMetricsEnabled
email:UpdateConfigurationSetSendingEnabled
email:UpdateConfigurationSetTrackingOptions
email:UpdateCustomVerificationEmailTemplate
email:UpdateReceiptRule
email:UpdateTemplate
email:VerifyDomainDkim
email:VerifyDomainIdentity
email:VerifyEmailAddress
email:VerifyEmailIdentity
entitlement:GetEntitlements
es:DeleteElasticsearchServiceRole
es:DescribeElasticsearchInstanceTypeLimits
es:ListElasticsearchInstanceTypes
es:ListElasticsearchVersions
events:DescribeEventBus
events:PutPermission
events:RemovePermission
fms:AssociateAdminAccount
fms:DeleteNotificationChannel
fms:DeletePolicy
fms:DisassociateAdminAccount
fms:GetAdminAccount
fms:GetComplianceDetail
fms:GetNotificationChannel
fms:GetPolicy
fms:ListComplianceStatus
fms:ListPolicies
fms:PutNotificationChannel
fms:PutPolicy
gamelift:AcceptMatch
gamelift:CreateGameSessionQueue
gamelift:CreateMatchmakingConfiguration
gamelift:CreateMatchmakingRuleSet
gamelift:CreateVpcPeeringAuthorization
gamelift:CreateVpcPeeringConnection
gamelift:DeleteGameSessionQueue
gamelift:DeleteMatchmakingConfiguration
gamelift:DeleteVpcPeeringAuthorization
gamelift:DeleteVpcPeeringConnection
gamelift:DescribeGameSessionPlacement
gamelift:DescribeGameSessionQueues
gamelift:DescribeMatchmaking
gamelift:DescribeMatchmakingConfigurations
gamelift:DescribeMatchmakingRuleSets
gamelift:DescribeVpcPeeringAuthorizations
gamelift:DescribeVpcPeeringConnections
gamelift:StartGameSessionPlacement
gamelift:StartMatchBackfill
gamelift:StartMatchmaking
gamelift:StopGameSessionPlacement
gamelift:StopMatchmaking
gamelift:UpdateGameSessionQueue
gamelift:UpdateMatchmakingConfiguration
gamelift:ValidateMatchmakingRuleSet
glue:BatchDeleteTableVersion
glue:BatchStopJobRun
glue:DeleteTableVersion
glue:GetTableVersion
glue:UpdateCrawlerSchedule
iam:UpdateRole
inspector:GetAssessmentReport
iot:AddThingToThingGroup
iot:CreateOTAUpdate
iot:CreateThingGroup
iot:DeleteOTAUpdate
iot:DeleteThingGroup
iot:DeleteV2LoggingLevel
iot:DescribeEventConfigurations
iot:DescribeThingGroup
iot:DescribeThingRegistrationTask
iot:GetOTAUpdate
iot:GetV2LoggingOptions
iot:ListOTAUpdates
iot:ListThingGroups
iot:ListThingGroupsForThing
iot:ListThingRegistrationTaskReports
iot:ListThingRegistrationTasks
iot:ListThingsInThingGroup
iot:ListV2LoggingLevels
iot:RegisterThing
iot:RemoveThingFromThingGroup
iot:SetV2LoggingLevel
iot:SetV2LoggingOptions
iot:StartThingRegistrationTask
iot:StopThingRegistrationTask
iot:UpdateEventConfigurations
iot:UpdateThingGroup
iot:UpdateThingGroupsForThing
kinesis:ListShards
kinesisanalytics:AddApplicationCloudWatchLoggingOption
kinesisanalytics:AddApplicationInputProcessingConfiguration
kinesisanalytics:DeleteApplicationCloudWatchLoggingOption
kinesisanalytics:DeleteApplicationInputProcessingConfiguration
kms:ReEncrypt*
lambda:AddEventSource
lambda:GetEventSource
lambda:Invoke
lambda:ListEventSources
lambda:RemoveEventSource
lambda:UploadFunction
lex:GetExport
lex:GetImport
lex:StartImport
lightsail:AttachDisk
lightsail:AttachInstancesToLoadBalancer
lightsail:AttachLoadBalancerTlsCertificate
lightsail:CreateDisk
lightsail:CreateDiskFromSnapshot
lightsail:CreateDiskSnapshot
lightsail:CreateLoadBalancer
lightsail:CreateLoadBalancerTlsCertificate
lightsail:DeleteDisk
lightsail:DeleteDiskSnapshot
lightsail:DeleteLoadBalancer
lightsail:DeleteLoadBalancerTlsCertificate
lightsail:DetachDisk
lightsail:DetachInstancesFromLoadBalancer
lightsail:GetDisk
lightsail:GetDiskSnapshot
lightsail:GetDiskSnapshots
lightsail:GetDisks
lightsail:GetLoadBalancer
lightsail:GetLoadBalancerMetricData
lightsail:GetLoadBalancerTlsCertificates
lightsail:GetLoadBalancers
lightsail:PutInstancePublicPorts
lightsail:UpdateLoadBalancerAttribute
machinelearning:CreateDataSourceFromS
marketplacecommerceanalytics:GenerateDataSet
marketplacecommerceanalytics:StartSupportDataExport
mechanicalturk:AcceptQualificationRequest
mechanicalturk:AssociateQualificationWithWorker
mechanicalturk:CreateAdditionalAssignmentsForHIT
mechanicalturk:CreateHITType
mechanicalturk:CreateHITWithHITType
mechanicalturk:CreateWorkerBlock
mechanicalturk:DeleteHIT
mechanicalturk:DeleteQualificationType
mechanicalturk:DeleteWorkerBlock
mechanicalturk:DisassociateQualificationFromWorker
mechanicalturk:ListAssignmentsForHIT
mechanicalturk:ListBonusPayments
mechanicalturk:ListHITs
mechanicalturk:ListHITsForQualificationType
mechanicalturk:ListQualificationRequests
mechanicalturk:ListQualificationTypes
mechanicalturk:ListReviewPolicyResultsForHIT
mechanicalturk:ListReviewableHITs
mechanicalturk:ListWorkerBlocks
mechanicalturk:ListWorkersWithQualificationType
mechanicalturk:SendBonus
mechanicalturk:UpdateExpirationForHIT
mechanicalturk:UpdateHITReviewStatus
mechanicalturk:UpdateHITTypeOfHIT
mechanicalturk:UpdateNotificationSettings
mediaconvert:DescribeEndpoints
medialive:UpdateChannel
medialive:UpdateInput
medialive:UpdateInputSecurityGroup
mediapackage:RotateChannelCredentials
mediastore:DeleteCorsPolicy
mediastore:GetCorsPolicy
mediastore:PutCorsPolicy
metering:BatchMeterUsage
metering:MeterUsage
metering:ResolveCustomer
mobile:CreateProject
mobile:DeleteProject
mobile:DescribeBundle
mobile:DescribeProject
mobile:ExportBundle
mobile:ExportProject
mobile:ListBundles
mobile:ListProjects
mobile:UpdateProject
opsworks:DescribeOperatingSystems
organizations:DisableAWSServiceAccess
organizations:EnableAWSServiceAccess
organizations:ListAWSServiceAccessForOrganization
pinpoint:CreateApp
pinpoint:CreateCampaign
pinpoint:CreateExportJob
pinpoint:CreateImportJob
pinpoint:CreateSegment
pinpoint:DeleteAdmChannel
pinpoint:DeleteApnsChannel
pinpoint:DeleteApnsSandboxChannel
pinpoint:DeleteApnsVoipChannel
pinpoint:DeleteApnsVoipSandboxChannel
pinpoint:DeleteApp
pinpoint:DeleteBaiduChannel
pinpoint:DeleteCampaign
pinpoint:DeleteEmailChannel
pinpoint:DeleteEndpoint
pinpoint:DeleteEventStream
pinpoint:DeleteGcmChannel
pinpoint:DeleteSegment
pinpoint:DeleteSmsChannel
pinpoint:GetAdmChannel
pinpoint:GetApnsChannel
pinpoint:GetApnsSandboxChannel
pinpoint:GetApnsVoipChannel
pinpoint:GetApnsVoipSandboxChannel
pinpoint:GetApp
pinpoint:GetApplicationSettings
pinpoint:GetApps
pinpoint:GetBaiduChannel
pinpoint:GetCampaign
pinpoint:GetCampaignActivities
pinpoint:GetCampaignVersion
pinpoint:GetCampaignVersions
pinpoint:GetCampaigns
pinpoint:GetEmailChannel
pinpoint:GetEndpoint
pinpoint:GetEventStream
pinpoint:GetExportJob
pinpoint:GetExportJobs
pinpoint:GetGcmChannel
pinpoint:GetImportJob
pinpoint:GetImportJobs
pinpoint:GetSegment
pinpoint:GetSegmentExportJobs
pinpoint:GetSegmentImportJobs
pinpoint:GetSegmentVersion
pinpoint:GetSegmentVersions
pinpoint:GetSegments
pinpoint:GetSmsChannel
pinpoint:PutEventStream
pinpoint:SendMessages
pinpoint:SendUsersMessages
pinpoint:UpdateAdmChannel
pinpoint:UpdateApnsChannel
pinpoint:UpdateApnsSandboxChannel
pinpoint:UpdateApnsVoipChannel
pinpoint:UpdateApnsVoipSandboxChannel
pinpoint:UpdateApplicationSettings
pinpoint:UpdateBaiduChannel
pinpoint:UpdateCampaign
pinpoint:UpdateEmailChannel
pinpoint:UpdateEndpoint
pinpoint:UpdateEndpointsBatch
pinpoint:UpdateGcmChannel
pinpoint:UpdateSegment
pinpoint:UpdateSmsChannel
rds:CopyDBClusterParameterGroup
rds:DescribeSourceRegions
rds:DescribeValidDBInstanceModifications
rds:ModifyDBSnapshot
rds:RemoveRoleFromDBCluster
rds:RestoreDBClusterFromS
rds:RestoreDBInstanceFromS
route53:GetAccountLimit
route53:GetHostedZoneLimit
route53:GetReusableDelegationSetLimit
route53domains:CheckDomainTransferability
runtime:InvokeEndpoint
s3:DeleteReplicationConfiguration
s3:SelectObjectContent
sagemaker:CreateNotebookInstanceLifecycleConfig
sagemaker:DeleteNotebookInstanceLifecycleConfig
sagemaker:DescribeNotebookInstanceLifecycleConfig
sagemaker:ListNotebookInstanceLifecycleConfigs
sagemaker:UpdateNotebookInstanceLifecycleConfig
secretsmanager:CancelRotateSecret
secretsmanager:CreateSecret
secretsmanager:DeleteSecret
secretsmanager:DescribeSecret
secretsmanager:GetRandomPassword
secretsmanager:GetSecretValue
secretsmanager:ListSecretVersionIds
secretsmanager:ListSecrets
secretsmanager:PutSecretValue
secretsmanager:RestoreSecret
secretsmanager:RotateSecret
secretsmanager:TagResource
secretsmanager:UntagResource
secretsmanager:UpdateSecret
secretsmanager:UpdateSecretVersionStage
servicecatalog:AssociateTagOptionWithResource
servicecatalog:CopyProduct
servicecatalog:CreateProvisionedProductPlan
servicecatalog:CreateTagOption
servicecatalog:DeleteProvisionedProductPlan
servicecatalog:DeleteTagOption
servicecatalog:DescribeCopyProductStatus
servicecatalog:DescribeProvisionedProduct
servicecatalog:DescribeProvisionedProductPlan
servicecatalog:DescribeTagOption
servicecatalog:DisassociateTagOptionFromResource
servicecatalog:ExecuteProvisionedProductPlan
servicecatalog:ListProvisionedProductPlans
servicecatalog:ListResourcesForTagOption
servicecatalog:ListTagOptions
servicecatalog:SearchProvisionedProducts
servicecatalog:UpdateTagOption
servicediscovery:UpdateInstanceCustomHealthStatus
shield:GetSubscriptionState
sms:CreateReplicationJob
sms:DeleteReplicationJob
sms:DeleteServerCatalog
sms:DisassociateConnector
sms:GetConnectors
sms:GetReplicationJobs
sms:GetReplicationRuns
sms:GetServers
sms:ImportServerCatalog
sms:StartOnDemandReplicationRun
sms:UpdateReplicationJob
ssm:ListComplianceItems
ssm:ListComplianceSummaries
ssm:ListResourceComplianceSummaries
storagegateway:NotifyWhenUploaded
transcribe:CreateVocabulary
transcribe:DeleteVocabulary
transcribe:GetVocabulary
transcribe:ListVocabularies
transcribe:UpdateVocabulary
waf-regional:CreateRuleGroup
waf-regional:DeletePermissionPolicy
waf-regional:DeleteRuleGroup
waf-regional:GetPermissionPolicy
waf-regional:GetRuleGroup
waf-regional:ListActivatedRulesInRuleGroup
waf-regional:ListRuleGroups
waf-regional:ListSubscribedRuleGroups
waf-regional:PutPermissionPolicy
waf-regional:UpdateRuleGroup
waf:CreateRuleGroup
waf:DeletePermissionPolicy
waf:DeleteRuleGroup
waf:GetPermissionPolicy
waf:GetRuleGroup
waf:ListActivatedRulesInRuleGroup
waf:ListRuleGroups
waf:ListSubscribedRuleGroups
waf:PutPermissionPolicy
waf:UpdateRuleGroup
workdocs:CreateComment
workdocs:CreateCustomMetadata
workdocs:CreateLabels
workdocs:DeleteComment
workdocs:DeleteCustomMetadata
workdocs:DeleteLabels
workdocs:DescribeActivities
workdocs:DescribeComments
workdocs:DescribeGroups
workdocs:DescribeRootFolders
workdocs:GetCurrentUser
workmail:AssociateDelegateToResource
workmail:AssociateMemberToGroup
workmail:CreateAlias
workmail:CreateUser
workmail:DeleteAlias
workmail:DeleteGroup
workmail:DeleteResource
workmail:DeleteUser
workmail:DeregisterFromWorkMail
workmail:DescribeGroup
workmail:DescribeOrganization
workmail:DescribeResource
workmail:DescribeUser
workmail:DisassociateDelegateFromResource
workmail:DisassociateMemberFromGroup
workmail:ListAliases
workmail:ListGroupMembers
workmail:ListGroups
workmail:ListOrganizations
workmail:ListResourceDelegates
workmail:ListResources
workmail:ListUsers
workmail:RegisterToWorkMail
workmail:ResetPassword
workmail:UpdatePrimaryEmailAddress
workmail:UpdateResource
