Lista de permisos

La siguiente tabla incluye una lista de todas las actividades de Amazon Web Services, sus operaciones disponibles y los permisos asociados.

Actividades EC2

Actividades	Operaciones	Permisos
RobotDeConfiguraciónDeAWS	GetDocumentAsync CreateDocumentAsync CreateAssociationAsync SendCommandAsync DeleteDocumentAsync	ssm:GetDocument ssm:CreateDocument ssm:CreateAssociation ssm:SendCommand ssm:DeleteDocument ssm:ListAssociations
AWSCreateInstance	RunInstancesAsync CreateTagsAsync DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ec2:RunInstances ec2:CreateTags ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages
AWSCreateInstanceFromTemplate	RunInstancesAsync CreateTagsAsync DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ec2:RunInstances ec2:CreateTags ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages
AWSGetInstance	DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages
AWSGetInstanceList	DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages
AWSRebootInstance	RebootInstancesAsync DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ec2:RebootInstances ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages
Comando AWSRunPowerShell	GetDocumentAsync CreateDocumentAsync CreateAssociationAsync SendCommandAsync DeleteDocumentAsync DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ssm:GetDocument ssm:CreateDocument ssm:CreateAssociation ssm:SendCommand ssm:DeleteDocument ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages ssm:ListAssociations
AWSStartInstance	StartInstancesAsync DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ec2:StartInstances ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages
AWSStopInstance	StopInstancesAsync DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ec2:StopInstances ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages
AWSTerminateInstance	TerminateInstancesAsync DescribeInstancesAsync DescribeInstanceAttributeAsync DescribeImagesAsync	ec2:TerminateInstances ec2:DescribeInstances ec2:DescribeInstanceAttribute ec2:DescribeImages

Actividades de depósitos de S3

Actividades	Operaciones	Permisos
DepósitoDeRegistroDeAWS	GetACLAsync PutACLAsync PutBucketLoggingAsync	s3:GetBucketAcl s3:PutBucketAcl s3:PutBucketLogging
DepósitoDeAccesoPúblicoConfigurarAWS	PutPublicAccessBlockAsync	s3:PutBucketPublicAccessBlock
AWSCreateBucket	DoesS3BucketExistV2Async PutBucketAsync PutBucketVersioningAsync DeleteBucketEncryptionAsync PutBucketEncryptionAsync PutBucketTaggingAsync PutPublicAccessBlockAsync ListBucketsAsync GetBucketLocationAsync GetBucketTaggingAsync GetBucketVersioningAsync GetACLAsync GetBucketLoggingAsync GetObjectLockConfigurationAsync GetPublicAccessBlockAsync GetBucketEncryptionAsync DeleteS3BucketWithObjectsAsync	s3:GetBucketAcl s3:CreateBucket s3:PutBucketObjectLockConfiguration s3:PutBucketVersioning s3:PutEncryptionConfiguration s3:PutEncryptionConfiguration s3:PutBucketTagging s3:PutBucketPublicAccessBlock s3:ListBucket s3:GetBucketLocation s3:GetBucketTagging s3:GetBucketVersioning s3:GetBucketAcl s3:GetBucketLogging s3:GetBucketObjectLockConfiguration s3:GetBucketPublicAccessBlock s3:GetEncryptionConfiguration s3:DeleteBucket s3:DeleteObject
DepósitoDeEliminarAWS	GetBucketVersioningAsync ListVersionsAsync ListObjectsV2Async DeleteObjectsAsync DeleteBucketAsync	s3:GetBucketVersioning s3:ListBucketVersions s3:ListBucket s3:DeleteObjectVersion s3:DeleteBucket s3:ListAllMyBuckets
PolíticaDeDepósitoDeAWS	DeleteBucketPolicyAsync	s3:DeleteBucketPolicy
DepósitoVacío	GetBucketVersioningAsync ListVersionsAsync ListObjectsV2Async DeleteObjectsAsync	s3:GetBucketVersioning s3:ListBucketVersions s3:ListBucket s3:DeleteObjectVersion
AWSGetBucket	DoesS3BucketExistV2Async ListBucketsAsync GetBucketLocationAsync GetBucketTaggingAsync GetACLAsync GetBucketVersioningAsync GetBucketLoggingAsync GetObjectLockConfigurationAsync GetPublicAccessBlockAsync GetBucketEncryptionAsync	s3:GetBucketAcl (opcional) s3: ListBucket s3:GetBucketLocation s3:GetBucketTagging s3:GetBucketAcl s3:GetBucketVersioning s3:GetBucketLogging s3:GetBucketObjectLockConfiguration s3:GetBucketPublicAccessBlock s3:GetEncryptionConfiguration
AWSGetBucketList	ListBucketsAsync GetBucketLocationAsync GetBucketTaggingAsync DoesS3BucketExistV2Async	s3:ListBucket s3:GetBucketLocation s3:GetBucketTagging s3:GetBucketAcl
AWSGetBucketPolicy	GetBucketPolicyAsync	s3:GetBucketPolicy
PolíticaDeDepósitoDeAWSSet	PutBucketPolicyAsync	s3:PutBucketPolicy
DepósitoDeActualizaciónDeAWS	DoesS3BucketExistV2Async PutBucketVersioningAsync DeleteBucketEncryptionAsync PutBucketEncryptionAsync PutBucketTaggingAsync PutPublicAccessBlockAsync	s3:GetBucketAcl s3:PutBucketVersioning s3:PutEncryptionConfiguration s3:PutEncryptionConfiguration s3:PutBucketTagging s3:PutBucketPublicAccessBlock

Actividades de objetos de S3

Actividades	Operaciones	Permisos
ObjetoDeCopiaDeAWS	GetBucketLocationAsync CopyObjectAsync	s3:GetBucketLocation s3:GetObject s3:PutObject
AWSDeleteMultipleObjects	DeleteObjectsAsync	s3:DeleteObjectVersion s3:GetObject
AWSDeleteSingleObject	DeleteObjectsAsync	s3:DeleteObjectVersion s3:GetObject
AWSDescargarObjetoSolo	GetObjectAsync	s3:GetObject
AWSForEachObject	ListObjectsV2Async GetObjectMetadataAsync GetBucketLocationAsync GetObjectTaggingAsync ListVersionsAsync	s3:ListBucket s3:GetObject s3:ListBucketVersions s3:GetBucketLocation s3:GetObjectTagging s3:ListBucketVersions
AWSGetObject	GetObjectMetadataAsync GetBucketLocationAsync GetObjectTaggingAsync ListVersionsAsync	s3:ListBucketVersions s3:GetBucketLocation s3:GetObjectTagging s3:ListBucketVersions s3:GetObject
AWSGetObjectACL	GetACLAsync	s3:GetObjectAcl s3:GetObject
AWSSetObjectACL	GetACLAsync PutACLAsync	s3:GetObjectAcl s3:PutObjectAcl s3:GetObject
AWSUploadMultipleObjects	UploadDirectoryAsync	s3:PutObject s3:ListBucketMultipartUploads s3:ListMultipartUploadParts s3:AbortMultipartUpload s3:GetObject
AWSUploadSingleObject	UploadAsync GetObjectMetadataAsync GetBucketLocationAsync GetObjectTaggingAsync ListVersionsAsync GetACLAsync PutACLAsync	s3:GetObject s3:PutObject s3:PutObjectTagging s3:PutObjectVersionTagging s3:ListBucketVersions s3:GetBucketLocation s3:GetObjectTagging s3:GetObjectVersionTagging s3:GetObjectAcl s3:PutObjectAcl s3:ListBucketMultipartUploads s3:ListMultipartUploadParts s3:AbortMultipartUpload

Actividades del grupo de IAM

Actividades	Operaciones	Permisos
AWSAddUserToGroup	AddUserToGroupAsync	iam:AddUserToGroup
AWSCreateGroup	CreateGroupAsync	iam:CreateGroup
AWSDeleteGroup	DeleteGroupAsync GetGroupAsync RemoveUserFromGroupAsync ListGroupPoliciesAsync DeleteGroupPolicyAsync ListAttachedGroupPoliciesAsync DetachGroupPolicyAsync	iam:DeleteGroup iam:GetGroup iam:RemoveUserFromGroup iam:ListGroupPolicies iam:DeleteGroupPolicy iam:ListAttachedGroupPolicies iam:DetachGroupPolicy
AWSParaCadaGrupo	ListGroupsAsync	iam:ListGroups
AWSGetGroup	GetGroupAsync	iam:GetGroup
AWSRemoveUserFromGroup	RemoveUserFromGroupAsync	iam:RemoveUserFromGroup
AWSUpdateGroup	UpdateGroupAsync GetGroupAsync	iam:UpdateGroup iam:GetGroup

Actividades de política de IAM

Actividades	Operaciones	Permisos
AWSAddEliminarPolíticaEnLínea	PutGroupPolicyAsync DeleteGroupPolicyAsync PutRolePolicyAsync DeleteRolePolicyAsync PutUserPolicyAsync DeleteUserPolicyAsync	iam:PutGroupPolicy iam:DeleteGroupPolicy iam:PutRolePolicy iam:DeleteRolePolicy iam:PutUserPolicy iam:DeleteUserPolicy
PolíticaAdministradaDeAWSAttachDetach	AttachGroupPolicyAsync DetachGroupPolicyAsync AttachRolePolicyAsync DetachRolePolicyAsync AttachUserPolicyAsync DetachUserPolicyAsync	iam:AttachGroupPolicy iam:DetachGroupPolicy iam:AttachRolePolicy iam:DetachRolePolicy iam:AttachUserPolicy iam:DetachUserPolicy
AWSCreateManagedPolicy	CreatePolicyAsync GetPolicyAsync ListPolicyVersionsAsync GetPolicyVersionAsync	iam:CreatePolicy iam:GetPolicy iam:ListPolicyVersions iam:GetPolicyVersion
AWSDeleteManagedPolicy	ListEntitiesForPolicyAsync DetachGroupPolicyAsync DetachRolePolicyAsync DetachUserPolicyAsync ListPolicyVersionsAsync GetPolicyVersionAsync DeletePolicyVersionAsync DeletePolicyAsync	iam:ListEntitiesForPolicy iam:DetachGroupPolicy iam:DetachRolePolicy iam:DetachUserPolicy iam:ListPolicyVersions iam:GetPolicyVersion iam:DeletePolicyVersion iam:DeletePolicy
AWSParaCadaPolítica	ListPoliciesAsync ListPolicyTagsAsync ListPolicyVersionsAsync GetPolicyVersionAsync	iam:ListPolicies iam:ListPolicyTags iam: ListPolicyVersions iam;GetPolicyVersion
AWSGetIAMIdentityPolíticas	ListGroupPoliciesAsync GetGroupPolicyAsync ListRolePoliciesAsync GetRolePolicyAsync ListUserPoliciesAsync GetUserPolicyAsync	iam:ListGroupPolicies iam:GetGroupPolicy iam:ListRolePolicies iam:GetRolePolicy iam:ListUserPolicies iam:GetUSerPolicy
PolíticasAdministradasDeIdentityAWSGetIAM	ListAttachedGroupPoliciesAsync ListAttachedRolePoliciesAsync ListAttachedUserPoliciesAsync	iam:ListAttachedGroupPolicies iam:ListAttachedRolePolicies iam:ListAttachedUserPolicies
AWSGetIdentitiesAdjuntasA laPolítica	ListEntitiesForPolicyAsync	iam:ListEntitiesForPolicy
AWSGetManagedPolicy	GetPolicyAsync ListPolicyVersionsAsync GetPolicyVersionAsync	iam:GetPolicy iam:ListPolicyVersions iam:GetPolicyVersion
PolíticaDeActualizaciónDeAWS	UntagPolicyAsync TagPolicyAsync CreatePolicyVersionAsync SetDefaultPolicyVersionAsync DeletePolicyVersionAsync GetPolicyAsync ListPolicyVersionsAsync GetPolicyVersionAsync	iam:UntagPolicy iam:TagPolicy iam:CreatePolicyVersion iam:SetDefaultPolicyVersion iam:DeletePolicyVersion iam:GetPolicy iam:ListPolicyVersions iam:GetPolicyVersion

Actividades de roles de IAM

Actividades	Operaciones	Permisos
AWSAddRoleToInstanceProfile	AddRoleToInstanceProfileAsync GetInstanceProfileAsync RemoveRoleFromInstanceProfileAsync	iam:AddRoleToInstanceProfile iam:GetInstanceProfile iam:RemoveRoleFromInstanceProfile
AWSRemoveRoleFromInstanceProfile	RemoveRoleFromInstanceProfileAsync	iam:RemoveRoleFromInstanceProfile
AWSCreateRole	CreateRoleAsync GetRoleAsync	iam:CreateRole iam:GetRole
AWSDeleteRole	DeleteRoleAsync ListInstanceProfilesForRoleAsync RemoveRoleFromInstanceProfileAsync ListRolePoliciesAsync DeleteRolePolicyAsync ListAttachedRolePoliciesAsync DetachRolePolicyAsync GetInstanceProfileAsync DeleteInstanceProfileAsync	iam:DeleteRole iam:ListInstanceProfilesForRole iam:RemoveRoleFromInstanceProfile iam:ListRolePolicies iam:DeleteRolePolicy iam:ListAttachedRolePolicies iam:DetachRolePolicy iam:GetInstanceProfile iam:DeleteInstanceProfile
AWSGetRole	GetRoleAsync	iam:GetRole
AWSUpdateRole	UpdateRoleAsync DeleteRolePermissionsBoundaryAsync PutRolePermissionsBoundaryAsync UntagRoleAsync TagRoleAsync GetRoleAsync	iam:UpdateRole iam:DeleteRolePermissionsBoundary iam:PutRolePermissionsBoundary iam:UntagRole iam:TagRole iam:GetRole
AWSForEachRole	ListRolesAsync ListRoleTagsAsync	iam:ListRoles iam:ListRoleTags

Actividades de usuario de IAM

Actividades	Operaciones	Permisos
AWSChangeUserPassword	UpdateLoginProfileAsync AttachUserPolicyAsync	iam:UpdateLoginProfile iam:AttachUserPolicy
AWSCreateUser	CreateUserAsync CreateLoginProfileAsync AttachUserPolicyAsync CreateAccessKeyAsync	iam:CreateUser iam:CreateLoginProfile iam:AttachUserPolicy iam:CreateAccessKey
AWSGetUser	GetUserAsync	iam:GetUser
AWSDeleteUser	DeleteUserAsync DeleteLoginProfileAsync ListAccessKeysAsync DeleteAccessKeyAsync ListSigningCertificatesAsync DeleteSigningCertificateAsync ListSSHPublicKeysAsync DeleteSSHPublicKeyAsync ListServiceSpecificCredentialsAsync DeleteServiceSpecificCredentialAsync ListVirtualMFADevicesAsync DeactivateMFADeviceAsync DeleteVirtualMFADeviceAsync ListUserPoliciesAsync DeleteUserPolicyAsync ListAttachedUserPoliciesAsync DetachUserPolicyAsync ListGroupsForUserAsync RemoveUserFromGroupAsync	iam:DeleteUser iam:DeleteLoginProfile iam:ListAccessKeys iam:DeleteAccessKey iam:ListSigningCertificates iam:DeleteSigningCertificate iam:ListSSHPublicKeys iam:DeleteSSHPublicKey iam:ListServiceSpecificCredentials iam:DeleteServiceSpecificCredential iam:ListVirtualMFADevices iam:DeactivateMFADevice iam:DeleteVirtualMFADevice iam:ListUserPolicies iam:DeleteUserPolicy iam:ListAttachedUserPolicies iam:DetachUserPolicy iam:ListGroupsForUser iam:RemoveUserFromGroup
AWSUpdateUser	UpdateUserAsync DeleteUserPermissionsBoundaryAsync PutUserPermissionsBoundaryAsync UntagUserAsync TagUserAsync GetUserAsync	iam:UpdateUser iam:DeleteUserPermissionsBoundary iam:PutUserPermissionsBoundary iam:UntagUser iam:TagUser iam:GetUser
AWSForEachUser	ListUsersAsync ListUserTagsAsync	iam:ListUsers iam:ListUserTags
AWSParaCadaGrupoDeUsuarios	ListGroupsForUserAsync	iam:ListGroupsForUser
AWSForEachUserInGroup	GetGroupAsync ListUserTagsAsync	iam:GetGroup iam:ListUserTags