AWS AddPermission20150331v2
Adds a statement to a Lambda resource-based policy.
Tag: AWS
AWS
All events with tag AWS.
AWS AddRoleToInstanceProfile
Adds one IAM role to an existing instance profile.
AWS AddUserToGroup
Adds an IAM user to a group, changing the policies that apply to the user.
AWS ArchiveFindings
Archives specified GuardDuty findings in a regional detector.
AWS AssociateIamInstanceProfile
Associates an instance profile with a running or stopped EC2 instance.
AWS AssumeRole
Returns temporary security credentials for assuming an IAM role. Allows an entity (user, service, or account) to act with the role's permissions.
AWS AssumeRoleWithSAML
Exchanges a validated SAML assertion for temporary IAM role credentials.
AWS AssumeRoleWithWebIdentity
Exchanges a web-identity token for temporary IAM role credentials.
AWS AttachGroupPolicy
Attaches a managed permissions policy to an IAM group.
AWS AttachRolePolicy
Attaches a managed permissions policy to an IAM role.
AWS AttachUserPolicy
Attaches a managed permissions policy to an IAM user.
AWS AuthorizeDBSecurityGroupIngress
Authorizes ingress to an RDS DB security group through a legacy networking API.
AWS AuthorizeSecurityGroupEgress
Adds outbound allow rules to an EC2 security group.
AWS AuthorizeSecurityGroupIngress
Adds inbound allow rules to an EC2 security group.
AWS ChangePassword
Changes the calling IAM user’s console password.
AWS ConsoleLogin
Records a sign-in attempt to the AWS Management Console, capturing success or failure status and whether MFA was used.
AWS CopyObject
Copies an S3 object to another key or bucket.
AWS CreateAccessEntry
Creates an EKS access entry for an existing IAM principal.
AWS CreateAccessKey
Creates a new long-term access key for an IAM user, enabling programmatic access to AWS services.
AWS CreateAccount
Requests creation of an AWS Organizations member account.
AWS CreateAssociation
Creates a Systems Manager State Manager association.
AWS CreateDBSnapshot
Starts creation of a manual RDS DB instance snapshot.
AWS CreateDevEndpoint
Creates a legacy AWS Glue development endpoint.
AWS CreateFilter
Creates a GuardDuty finding filter, optionally with an automatic archive action.
AWS CreateImage
Starts creation of an EBS-backed AMI from an EC2 instance.
AWS CreateInstanceExportTask
Starts an eligible EC2 instance export to an S3 bucket.
AWS CreateIPSet
Creates a GuardDuty trusted IP list and optionally requests activation.
AWS CreateKeyPair
Creates an EC2 key pair and returns its private key to the API caller.
AWS CreateLoginProfile
Creates a console password for an IAM user.
AWS CreateNetworkAclEntry
Adds an inbound or outbound allow/deny rule to a VPC network ACL.
AWS CreateOpenIDConnectProvider
Registers an OIDC identity provider in IAM.
AWS CreatePolicy
Creates a customer-managed IAM policy with an initial default version.
AWS CreatePolicyVersion
Creates a customer-managed policy version, optionally making it the operative version.
AWS CreateRole
Creates an IAM role with a trust policy and optional role settings.
AWS CreateSAMLProvider
Registers SAML identity-provider metadata in IAM.
AWS CreateServiceLinkedRole
Creates an IAM role linked to a specific AWS service.
AWS CreateSnapshot
Starts creation of a point-in-time EBS volume snapshot.
AWS CreateStack
Requests provisioning of a CloudFormation stack from a template.
AWS CreateUser
Creates an IAM user without automatically creating sign-in credentials.
AWS CreateVirtualMFADevice
Creates a virtual MFA device that must be enabled separately for an IAM user.
AWS DeactivateMFADevice
Deactivates a specified MFA device and removes its association with a user.
AWS DeleteAccessKey
Deletes an IAM access key permanently.
AWS DeleteAlarms
Deletes specified CloudWatch alarms in an account and Region.
AWS DeleteBucket
Deletes an empty S3 bucket, after all object versions and delete markers are removed.
AWS DeleteBucketPolicy
Removes an S3 bucket policy without resetting other access controls.
AWS DeleteConfigRule
Deletes an AWS Config rule and its evaluation results.
AWS DeleteConfigurationRecorder
Deletes a customer-managed AWS Config recorder in one Region.
AWS DeleteDBCluster
Deletes an RDS DB cluster with configurable final-snapshot and backup handling.
AWS DeleteDBInstance
Deletes an RDS DB instance with configurable final-snapshot and backup handling.
AWS DeleteDeliveryChannel
Deletes an AWS Config delivery channel after customer-managed recording is stopped.
AWS DeleteDetector
Deletes a regional GuardDuty detector, disabling GuardDuty for that account and Region.
AWS DeleteEventDataStore
Disables a CloudTrail Lake event data store and starts a seven-day deletion window.
AWS DeleteFileSystem
Deletes an EFS file system after mount-target and replication prerequisites are satisfied.
AWS DeleteFlowLogs
Deletes selected VPC Flow Log configurations without deleting their previously delivered log data.
AWS DeleteGlobalCluster
Deletes an empty Aurora global-database container after regional members are detached or deleted.
AWS DeleteLogGroup
Deletes a CloudWatch Logs group and permanently removes its stored log events.
AWS DeleteLoginProfile
Deletes the target user’s AWS console password without deleting access keys.
AWS DeleteLogStream
Deletes a CloudWatch Logs stream and permanently removes its stored events.
AWS DeleteMembers
Deletes GuardDuty member records from an administrator’s regional detector.
AWS DeleteNetworkAcl
Deletes a nondefault VPC network ACL that has no subnet associations.
AWS DeleteNetworkAclEntry
Deletes a numbered inbound or outbound rule from a VPC network ACL.
AWS DeleteObject
Deletes an S3 object or a specified version, depending on versioning state.
AWS DeleteObjects
Requests deletion of multiple S3 object keys or specific versions in one batch.
AWS DeleteRolePermissionsBoundary
Removes the permissions boundary on an IAM role, potentially changing effective access.
AWS DeleteRolePolicy
Deletes a named inline permissions policy from an IAM role.
AWS DeleteRuleGroup
Deletes an AWS WAFv2 rule group identified by name, ID, and scope.
AWS DeleteSnapshot
Deletes an EBS snapshot, subject to protection and retention controls.
AWS DeleteTrail
Deletes a CloudTrail trail and stops its future collection without deleting previously delivered logs.
AWS DeleteUser
Deletes an IAM user after dependent credentials and associations are removed.
AWS DeleteUserPermissionsBoundary
Removes the permissions boundary on an IAM user, potentially changing effective access.
AWS DeleteUserPolicy
Deletes a named inline permissions policy from an IAM user.
AWS DeleteVirtualMFADevice
Deletes an unassigned virtual MFA device resource.
AWS DeleteVolume
Deletes an available EBS volume without deleting its snapshots.
AWS DeleteWebACL
Deletes an unassociated AWS WAFv2 web ACL not managed by Firewall Manager.
AWS DetachRolePolicy
Detaches a managed policy from an IAM role without deleting the policy.
AWS DetachUserPolicy
Detaches a managed policy from an IAM user without deleting the policy.
AWS DisableKey
Disables a KMS key for cryptographic operations until re-enabled.
AWS DisassociateFromMasterAccount
Legacy API for disassociating a GuardDuty member from its administrator.
AWS DisassociateMembers
Disassociates specified members from a regional GuardDuty administrator.
AWS EnableRegion
Requests activation of an opt-in AWS Region for an account.
AWS EnableSerialConsoleAccess
Enables EC2 Serial Console access for the account in the current Region.
AWS GetAuthorizationToken
Requests a temporary authentication token for private Amazon ECR registries.
AWS GetFederationToken
Issues temporary federated-user credentials using long-term IAM-user credentials.
AWS GetObject
Retrieves an S3 object or selected version, optionally as a byte range.
AWS GetParameters
Retrieves up to ten named Parameter Store parameters, optionally decrypting SecureString values.
AWS GetPasswordData
Retrieves encrypted Windows administrator password data for an EC2 instance.
AWS GetSecretValue
Retrieves the selected version of a Secrets Manager secret.
AWS GetSessionToken
Issues temporary credentials for an IAM user, optionally with MFA context.
AWS GetSigninToken
Requests a federation sign-in token for AWS console access.
AWS ImportKeyPair
Registers an existing public key as an EC2 key pair.
AWS Invoke
Requests synchronous, asynchronous, or dry-run Lambda invocation.
AWS LeaveOrganization
Removes the calling member account from its AWS organization.
AWS ModifyDBInstance
Modifies RDS DB instance settings, subject to parameter-specific application rules.
AWS ModifyDBSnapshotAttribute
Changes sharing attributes of a manual RDS DB snapshot.
AWS ModifyImageAttribute
Changes an AMI attribute, including launch permissions for other accounts.
AWS ModifyInstanceAttribute
Changes a supported EC2 instance attribute, including user data or security groups.
AWS ModifySnapshotAttribute
Changes EBS snapshot attributes, including volume-creation permissions.
AWS PassRole
An IAM permission checked when a caller assigns a role to an AWS service; not an API event.
AWS PasswordRecoveryRequested
Records initiation of an AWS root-user password recovery request.
AWS PutBucketAcl
Replaces an S3 bucket ACL where ACLs are enabled.
AWS PutBucketLifecycle
Creates or replaces S3 lifecycle rules for expiration and storage management.
AWS PutBucketLifecycleConfiguration
Creates or replaces an S3 bucket lifecycle configuration.
AWS PutBucketPolicy
Creates or replaces an S3 bucket resource policy.
AWS PutBucketPublicAccessBlock
Sets the four bucket-level S3 Block Public Access controls.
AWS PutBucketReplication
Creates or replaces an S3 bucket replication configuration.
AWS PutEventSelectors
Configures basic or advanced selectors that determine which events a CloudTrail trail records.
AWS PutGroupPolicy
Adds or replaces a named inline permissions policy on an IAM group.
AWS PutImage
Registers an ECR image manifest and associated tag after layer upload.
AWS PutKeyPolicy
Replaces the policy on a KMS key.
AWS PutRolePermissionsBoundary
Sets or replaces the permissions boundary on an IAM role, potentially changing effective access.
AWS PutRolePolicy
Adds or replaces a named inline permissions policy on an IAM role.
AWS PutRule
Creates or updates an EventBridge rule.
AWS PutTargets
Adds or updates targets associated with an EventBridge rule.
AWS PutUserPermissionsBoundary
Sets or replaces the permissions boundary on an IAM user, potentially changing effective access.
AWS PutUserPolicy
Adds or replaces a named inline permissions policy on an IAM user.
AWS RemoveAccountFromOrganization
Removes a specified member account from an AWS organization.
AWS RemoveUserFromGroup
Removes an IAM user from a group, changing the policies that apply to the user.
AWS ReplaceIamInstanceProfileAssociation
Replaces the instance profile associated with a running EC2 instance.
AWS RestoreDBInstanceFromDBSnapshot
Creates a new RDS DB instance from a snapshot.
AWS ResumeSession
Reconnects to a disconnected SSM Session Manager session.
AWS ScheduleKeyDeletion
Schedules KMS key deletion and makes the pending key unavailable for cryptographic operations.
AWS SendCommand
Submits an SSM Run Command document to managed nodes.
AWS SendSerialConsoleSSHPublicKey
Publishes an SSH key for a 60-second EC2 serial-console connection window.
AWS SendSSHPublicKey
Publishes a temporary SSH key through EC2 Instance Connect.
AWS SetDefaultPolicyVersion
Selects an existing customer-managed IAM policy version as the operative version.
AWS SharedSnapshotCopyInitiated
Service event indicating use of a shared EBS snapshot to initiate a copy.
AWS SharedSnapshotVolumeCreated
Service event indicating use of a shared EBS snapshot to create a volume.
AWS StartBuild
Starts a CodeBuild build with optional execution overrides.
AWS StartExportTask
Starts an RDS data export to Amazon S3.
AWS StartSession
Starts an SSM Session Manager session.
AWS StopConfigurationRecorder
Stops the named customer-managed AWS Config recorder from recording its configured resource types.
AWS StopLogging
Stops logging API activity for a CloudTrail trail, disabling audit log collection for that trail.
AWS StopMonitoringMembers
Suspends GuardDuty monitoring for specified member accounts in a Region.
AWS TerminateInstances
Terminates EC2 instances, with storage impact determined by their configuration.
AWS UpdateAccessKey
Sets an IAM access key to Active or Inactive.
AWS UpdateAssumeRolePolicy
Replaces an IAM role trust policy, changing the conditions for assuming it.
AWS UpdateDetector
Updates a regional GuardDuty detector, including its enabled state and protection features.
AWS UpdateDevEndpoint
Changes a Glue development endpoint’s keys, arguments, or libraries.
AWS UpdateFindingsFeedback
Marks specified GuardDuty findings as useful or not useful.
AWS UpdateFunctionCode20150331v2
Updates the unpublished code of a Lambda function.
AWS UpdateFunctionConfiguration20150331v2
Updates a Lambda function’s unpublished configuration.
AWS UpdateIPSet
Updates a GuardDuty trusted IP list configuration and activation request.
AWS UpdateLoginProfile
Updates an IAM user console password or password-reset requirement.
AWS UpdateTrail
Changes a CloudTrail trail configuration, including delivery destinations, regional scope, and log-file validation.