Brute Force AWS Permissions

The script will first try to enumerate your permissions querying the IAM service, and then give you the options to brute force permissions.

The script bf-aws-permissions.sh will try to run all the list*, describe*, get* commands from all the aws services it can discover using the CLI and indicate the ones that worked.

This can have false negatives, but it's the easiest approach to check want you can enumerate without needing to code each possible action independently, and it won't have false positives:

You might be able to run a command that needs another extra specific param and that will be a false negative (the tool is already testing with random params)
You might be able to have permissions over not list*, describe*, get* commands and that will be a false negative

Improvements TODO

Some actions require specific ARNs from the account in 1 or more params, so generating a random ARN that fullfil the ARN regex and checking if the error says that the user doesn't have permission to that random data or that the data just doesn't exist but the user could have access could indicate access over the action

Quick start

# Remember to set the region in the profile
bash bf-aws-permissions.sh -p "<profile-name>" -r <region>
# BF only the 10 services most used according to GPT4
bash bf-aws-permissions.sh -p "<profile-name>" -r us-east-1 -s 's3|ec2|lambda|rds|sns|sqs|cloudwatch|cloudfront|iam|dynamodb'
# Skip initial checks and go straight to BF
bash bf-aws-permissions.sh -p "<profile-name>" -r us-east-1 -s 's3|ec2|lambda|rds|sns|sqs|cloudwatch|cloudfront|iam|dynamodb' -b

# For temp creds use:
aws configure set aws_session_token <token>

Find even more permissions

Once you have bruteforced you permissions check the tool https://github.com/carlospolop/aws-Perms2ManagedPolicies to try to guess more permissions you might have if your principal is being granted permissions using AWS managed policies.

Known "False Positives"

User/Role without any permissions

This tool detect as valid the following actions using a user/role without any permissions:

aws configure list
aws configure list-profiles
aws dynamodb describe-endpoints
aws elasticbeanstalk describe-application-versions
aws elasticbeanstalk describe-applications
aws elasticbeanstalk describe-environments
aws elasticbeanstalk describe-events
aws elasticbeanstalk list-available-solution-stacks
aws elasticbeanstalk list-platform-versions
aws kinesis-video-archived-media get-dash-streaming-session-url
aws kinesis-video-archived-media get-hls-streaming-session-url
aws kinesis-video-archived-media list-fragments
aws kinesis-video-signaling get-ice-server-config
aws route53 get-geo-location
aws route53 list-geo-locations
aws sts get-caller-identity
aws sts get-session-token (only if a user, not a role)

All actions it can detect

User/Role with Administrator permissions

This tool detect as valid the following actions using a user/role with admin permissions:

aws accessanalyzer list-analyzers
aws accessanalyzer list-policy-generations
aws account get-contact-information
aws account list-regions
aws acm get-account-configuration
aws acm list-certificates
aws acm-pca list-certificate-authorities
aws amp list-workspaces
aws amplify list-apps
aws amplifybackend list-s3-buckets
aws apigateway get-account
aws apigateway get-api-keys
aws apigateway get-client-certificates
aws apigateway get-domain-names
aws apigateway get-rest-apis
aws apigateway get-sdk-types
aws apigateway get-usage-plans
aws apigateway get-vpc-links
aws apigateway get-usage-plan-keys
aws apigatewayv2 get-apis
aws apigatewayv2 get-domain-names
aws apigatewayv2 get-authorizers
aws apigatewayv2 get-vpc-links
aws appconfig list-applications
aws appconfig list-deployment-strategies
aws appconfig list-extension-associations
aws appconfig list-extensions
aws appfabric list-app-bundles
aws appflow describe-connector-profiles
aws appflow describe-connectors
aws appflow list-connectors
aws appflow list-flows
aws appintegrations list-applications
aws appintegrations list-data-integrations
aws appintegrations list-event-integrations
aws appintegrations list-data-integration-associations
aws appintegrations list-event-integration-associations
aws application-insights list-applications
aws application-insights list-problems
aws appmesh list-meshes
aws apprunner list-auto-scaling-configurations
aws apprunner list-connections
aws apprunner list-observability-configurations
aws apprunner list-services
aws apprunner list-vpc-connectors
aws apprunner list-vpc-ingress-connections
aws appstream describe-app-block-builders
aws appstream describe-app-blocks
aws appstream describe-applications
aws appstream describe-directory-configs
aws appstream describe-fleets
aws appstream describe-image-builders
aws appstream describe-images
aws appstream describe-stacks
aws appstream describe-usage-report-subscriptions
aws appstream describe-sessions
aws appstream list-associated-fleets
aws appstream list-associated-stacks
aws appsync list-domain-names
aws appsync list-graphql-apis
aws arc-zonal-shift list-managed-resources
aws arc-zonal-shift list-zonal-shifts
aws athena list-application-dpu-sizes
aws athena list-capacity-reservations
aws athena list-data-catalogs
aws athena list-engine-versions
aws athena list-named-queries
aws athena list-query-executions
aws athena list-work-groups
aws auditmanager get-account-status
aws autoscaling describe-account-limits
aws autoscaling describe-adjustment-types
aws autoscaling describe-auto-scaling-groups
aws autoscaling describe-auto-scaling-instances
aws autoscaling describe-auto-scaling-notification-types
aws autoscaling describe-launch-configurations
aws autoscaling describe-lifecycle-hook-types
aws autoscaling describe-metric-collection-types
aws autoscaling describe-notification-configurations
aws autoscaling describe-policies
aws autoscaling describe-lifecycle-hooks
aws autoscaling describe-scaling-activities
aws autoscaling describe-scaling-process-types
aws autoscaling describe-scheduled-actions
aws autoscaling describe-tags
aws autoscaling describe-termination-policy-types
aws autoscaling-plans describe-scaling-plans
aws backup describe-global-settings
aws backup describe-region-settings
aws backup get-supported-resource-types
aws backup list-backup-jobs
aws backup list-backup-plan-templates
aws backup list-backup-plans
aws backup list-backup-vaults
aws backup list-copy-jobs
aws backup list-frameworks
aws backup list-legal-holds
aws backup list-protected-resources
aws backup list-report-jobs
aws backup list-report-plans
aws backup list-restore-jobs
aws backup-gateway list-gateways
aws backup-gateway list-hypervisors
aws backup-gateway list-virtual-machines
aws batch describe-compute-environments
aws batch describe-job-definitions
aws batch describe-job-queues
aws batch list-scheduling-policies
aws batch describe-jobs
aws bedrock get-model-invocation-logging-configuration
aws bedrock list-custom-models
aws bedrock list-foundation-models
aws bedrock list-model-customization-jobs
aws bedrock list-provisioned-model-throughputs
aws billingconductor list-account-associations
aws billingconductor list-billing-group-cost-reports
aws billingconductor list-billing-groups
aws billingconductor list-custom-line-items
aws billingconductor list-pricing-plans
aws billingconductor list-pricing-rules
aws ce get-anomaly-monitors
aws ce get-anomaly-subscriptions
aws ce list-cost-allocation-tags
aws ce list-cost-category-definitions
aws ce list-savings-plans-purchase-recommendation-generation
aws chime get-global-settings
aws chime get-phone-number-settings
aws chime list-accounts
aws chime list-phone-number-orders
aws chime list-phone-numbers
aws chime-sdk-identity list-app-instances
aws chime-sdk-media-pipelines list-media-capture-pipelines
aws chime-sdk-media-pipelines list-media-insights-pipeline-configurations
aws chime-sdk-media-pipelines list-media-pipeline-kinesis-video-stream-pools
aws chime-sdk-media-pipelines list-media-pipelines
aws chime-sdk-messaging get-messaging-session-endpoint
aws chime-sdk-voice get-global-settings
aws chime-sdk-voice get-phone-number-settings
aws chime-sdk-voice get-voice-connector-logging-configuration
aws chime-sdk-voice list-available-voice-connector-regions
aws chime-sdk-voice list-phone-number-orders
aws chime-sdk-voice list-phone-numbers
aws chime-sdk-voice list-sip-media-applications
aws chime-sdk-voice list-sip-rules
aws chime-sdk-voice list-voice-connector-groups
aws chime-sdk-voice list-voice-connectors
aws chime-sdk-voice list-voice-profile-domains
aws cleanrooms list-collaborations
aws cleanrooms list-configured-tables
aws cleanrooms list-memberships
aws cloud9 describe-environment-memberships
aws cloud9 list-environments
aws cloudcontrol list-resource-requests
aws clouddirectory list-development-schema-arns
aws clouddirectory list-directories
aws clouddirectory list-managed-schema-arns
aws clouddirectory list-published-schema-arns
aws cloudformation describe-account-limits
aws cloudformation describe-organizations-access
aws cloudformation describe-stacks
aws cloudformation list-exports
aws cloudformation list-stack-sets
aws cloudformation list-stacks
aws cloudformation list-types
aws cloudfront list-cache-policies
aws cloudfront list-cloud-front-origin-access-identities
aws cloudfront list-continuous-deployment-policies
aws cloudfront list-distributions
aws cloudfront list-field-level-encryption-configs
aws cloudfront list-field-level-encryption-profiles
aws cloudfront list-functions
aws cloudfront list-key-groups
aws cloudfront list-distributions-by-web-acl-id
aws cloudfront list-origin-access-controls
aws cloudfront list-origin-request-policies
aws cloudfront list-public-keys
aws cloudfront list-realtime-log-configs
aws cloudfront list-response-headers-policies
aws cloudfront list-streaming-distributions
aws cloudhsmv2 describe-backups
aws cloudhsmv2 describe-clusters
aws cloudsearch describe-domains
aws cloudsearch list-domain-names
aws cloudtrail describe-trails
aws cloudtrail list-channels
aws cloudtrail list-event-data-stores
aws cloudtrail list-imports
aws cloudtrail list-public-keys
aws cloudtrail list-trails
aws cloudwatch describe-alarm-history
aws cloudwatch describe-alarms
aws cloudwatch describe-anomaly-detectors
aws cloudwatch describe-insight-rules
aws cloudwatch list-dashboards
aws cloudwatch describe-alarms-for-metric
aws cloudwatch list-metric-streams
aws cloudwatch list-metrics
aws codeartifact list-domains
aws codeartifact list-repositories
aws codebuild list-build-batches
aws codebuild list-builds
aws codebuild list-curated-environment-images
aws codebuild list-projects
aws codebuild list-report-groups
aws codebuild list-reports
aws codebuild list-shared-projects
aws codebuild list-shared-report-groups
aws codebuild list-source-credentials
aws codecommit list-approval-rule-templates
aws codecommit list-repositories
aws codeguru-reviewer list-repository-associations
aws codeguru-security get-account-configuration
aws codeguru-security list-scans
aws codeguruprofiler get-findings-report-account-summary
aws codeguruprofiler list-profiling-groups
aws codepipeline list-action-types
aws codepipeline list-pipelines
aws codepipeline list-webhooks
aws codestar list-projects
aws codestar list-user-profiles
aws codestar-connections list-connections
aws codestar-connections list-hosts
aws codestar-notifications list-notification-rules
aws codestar-notifications list-event-types
aws codestar-notifications list-targets
aws cognito-idp describe-user-pool-domain
aws cognito-sync list-identity-pool-usage
aws comprehend list-document-classification-jobs
aws comprehend list-document-classifier-summaries
aws comprehend list-document-classifiers
aws comprehend list-dominant-language-detection-jobs
aws comprehend list-endpoints
aws comprehend list-entities-detection-jobs
aws comprehend list-entity-recognizer-summaries
aws comprehend list-entity-recognizers
aws comprehend list-events-detection-jobs
aws comprehend list-flywheels
aws comprehend list-key-phrases-detection-jobs
aws comprehend list-pii-entities-detection-jobs
aws comprehend list-sentiment-detection-jobs
aws comprehend list-targeted-sentiment-detection-jobs
aws comprehend list-topics-detection-jobs
aws comprehendmedical list-entities-detection-v2-jobs
aws comprehendmedical list-icd10-cm-inference-jobs
aws comprehendmedical list-phi-detection-jobs
aws comprehendmedical list-rx-norm-inference-jobs
aws comprehendmedical list-snomedct-inference-jobs
aws compute-optimizer get-enrollment-status
aws configservice describe-aggregation-authorizations
aws configservice describe-compliance-by-config-rule
aws configservice describe-config-rule-evaluation-status
aws configservice describe-config-rules
aws configservice describe-configuration-aggregators
aws configservice describe-configuration-recorder-status
aws configservice describe-configuration-recorders
aws configservice describe-conformance-pack-status
aws configservice describe-conformance-packs
aws configservice describe-delivery-channel-status
aws configservice describe-delivery-channels
aws configservice describe-organization-config-rule-statuses
aws configservice describe-organization-config-rules
aws configservice describe-organization-conformance-pack-statuses
aws configservice describe-compliance-by-resource
aws configservice describe-organization-conformance-packs
aws configservice describe-pending-aggregation-requests
aws configservice describe-retention-configurations
aws configservice describe-remediation-configurations
aws configservice get-compliance-summary-by-config-rule
aws configservice get-compliance-summary-by-resource-type
aws configservice get-discovered-resource-counts
aws configservice get-status
aws configservice list-conformance-pack-compliance-scores
aws configservice list-resource-evaluations
aws configservice list-stored-queries
aws configservice list-discovered-resources
aws configure list
aws configure list-profiles
aws connect list-instances
aws connect list-phone-numbers-v2
aws connect list-default-vocabularies
aws connect list-traffic-distribution-groups
aws connectcampaigns list-campaigns
aws connectcampaigns get-campaign-state-batch
aws connectcases list-domains
aws cur describe-report-definitions
aws customer-profiles list-domains
aws customer-profiles list-profile-object-type-templates
aws customer-profiles list-account-integrations
aws databrew list-datasets
aws databrew list-jobs
aws databrew list-projects
aws databrew list-recipes
aws databrew list-rulesets
aws databrew list-schedules
aws databrew list-recipe-versions
aws dataexchange list-data-sets
aws dataexchange list-event-actions
aws dataexchange list-jobs
aws datapipeline list-pipelines
aws datasync list-agents
aws datasync list-discovery-jobs
aws datasync list-locations
aws datasync list-storage-systems
aws datasync list-task-executions
aws datasync list-tasks
aws datazone list-domains
aws dax describe-clusters
aws dax describe-default-parameters
aws dax describe-events
aws dax describe-parameter-groups
aws dax describe-subnet-groups
aws deploy list-applications
aws deploy list-deployment-configs
aws deploy list-deployments
aws deploy list-git-hub-account-token-names
aws deploy list-on-premises-instances
aws detective list-graphs
aws detective list-invitations
aws detective list-organization-admin-accounts
aws devops-guru describe-account-health
aws devops-guru list-monitored-resources
aws devops-guru list-notification-channels
aws devops-guru list-recommendations
aws directconnect describe-connections
aws directconnect describe-customer-metadata
aws directconnect describe-direct-connect-gateway-association-proposals
aws directconnect describe-direct-connect-gateways
aws directconnect describe-lags
aws directconnect describe-locations
aws directconnect describe-virtual-gateways
aws directconnect describe-virtual-interfaces
aws directconnect list-virtual-interface-test-history
aws discovery describe-agents
aws discovery describe-continuous-exports
aws discovery describe-export-tasks
aws discovery describe-import-tasks
aws discovery describe-tags
aws discovery get-discovery-summary
aws dlm get-lifecycle-policies
aws discovery list-server-neighbors
aws dms describe-account-attributes
aws dms describe-applicable-individual-assessments
aws dms describe-certificates
aws dms describe-connections
aws dms describe-data-providers
aws dms describe-endpoint-types
aws dms describe-endpoints
aws dms describe-engine-versions
aws dms describe-event-categories
aws dms describe-event-subscriptions
aws dms describe-events
aws dms describe-fleet-advisor-collectors
aws dms describe-fleet-advisor-databases
aws dms describe-fleet-advisor-lsa-analysis
aws dms describe-fleet-advisor-schema-object-summary
aws dms describe-fleet-advisor-schemas
aws dms describe-instance-profiles
aws dms describe-migration-projects
aws dms describe-pending-maintenance-actions
aws dms describe-recommendation-limitations
aws dms describe-recommendations
aws dms describe-replication-configs
aws dms describe-orderable-replication-instances
aws dms describe-replication-instances
aws dms describe-replication-subnet-groups
aws dms describe-replication-task-assessment-runs
aws dms describe-replication-task-individual-assessments
aws dms describe-replication-tasks
aws dms describe-replications
aws docdb describe-certificates
aws docdb describe-db-cluster-parameter-groups
aws docdb describe-db-cluster-snapshots
aws docdb describe-db-clusters
aws docdb describe-db-instances
aws docdb describe-db-subnet-groups
aws docdb describe-event-categories
aws docdb describe-event-subscriptions
aws docdb describe-events
aws docdb describe-global-clusters
aws docdb describe-pending-maintenance-actions
aws docdb-elastic list-cluster-snapshots
aws docdb-elastic list-clusters
aws docdb describe-db-engine-versions
aws ds describe-directories
aws ds describe-event-topics
aws ds describe-snapshots
aws ds describe-trusts
aws ds get-directory-limits
aws ds list-log-subscriptions
aws dynamodb describe-endpoints
aws dynamodb describe-limits
aws dynamodb list-backups
aws dynamodb list-contributor-insights
aws dynamodb list-exports
aws dynamodb list-global-tables
aws dynamodb list-imports
aws dynamodb list-tables
aws dynamodbstreams list-streams
aws ec2 describe-account-attributes
aws ec2 describe-address-transfers
aws ec2 describe-addresses
aws ec2 describe-addresses-attribute
aws ec2 describe-aggregate-id-format
aws ec2 describe-availability-zones
aws ec2 describe-aws-network-performance-metric-subscriptions
aws ec2 describe-bundle-tasks
aws ec2 describe-capacity-reservation-fleets
aws ec2 describe-capacity-reservations
aws ec2 describe-carrier-gateways
aws ec2 describe-classic-link-instances
aws ec2 describe-client-vpn-endpoints
aws ec2 describe-coip-pools
aws ec2 describe-conversion-tasks
aws ec2 describe-customer-gateways
aws ec2 describe-dhcp-options
aws ec2 describe-egress-only-internet-gateways
aws ec2 describe-export-image-tasks
aws ec2 describe-export-tasks
aws ec2 describe-fast-launch-images
aws ec2 describe-fast-snapshot-restores
aws ec2 describe-fleets
aws ec2 describe-flow-logs
aws ec2 describe-host-reservations
aws ec2 describe-hosts
aws ec2 describe-iam-instance-profile-associations
aws ec2 describe-id-format
aws ec2 describe-host-reservation-offerings
aws ec2 describe-import-image-tasks
aws ec2 describe-import-snapshot-tasks
aws ec2 describe-instance-connect-endpoints
aws ec2 describe-instance-credit-specifications
aws ec2 describe-instance-event-notification-attributes
aws ec2 describe-instance-event-windows
aws ec2 describe-instance-status
aws ec2 describe-instances
aws ec2 describe-internet-gateways
aws ec2 describe-ipam-pools
aws ec2 describe-instance-type-offerings
aws ec2 describe-ipam-resource-discoveries
aws ec2 describe-ipam-resource-discovery-associations
aws ec2 describe-ipam-scopes
aws ec2 describe-ipams
aws ec2 describe-ipv6-pools
aws ec2 describe-key-pairs
aws ec2 describe-launch-templates
aws ec2 describe-local-gateway-route-table-virtual-interface-group-associations
aws ec2 describe-local-gateway-route-table-vpc-associations
aws ec2 describe-local-gateway-route-tables
aws ec2 describe-local-gateway-virtual-interface-groups
aws ec2 describe-local-gateway-virtual-interfaces
aws ec2 describe-local-gateways
aws ec2 describe-managed-prefix-lists
aws ec2 describe-moving-addresses
aws ec2 describe-nat-gateways
aws ec2 describe-network-acls
aws ec2 describe-network-insights-access-scope-analyses
aws ec2 describe-network-insights-access-scopes
aws ec2 describe-network-insights-analyses
aws ec2 describe-network-insights-paths
aws ec2 describe-network-interface-permissions
aws ec2 describe-network-interfaces
aws ec2 describe-placement-groups
aws ec2 describe-prefix-lists
aws ec2 describe-principal-id-format
aws ec2 describe-public-ipv4-pools
aws ec2 describe-fpga-images
aws ec2 describe-regions
aws ec2 describe-reserved-instances
aws ec2 describe-replace-root-volume-tasks
aws ec2 describe-reserved-instances-modifications
aws ec2 describe-route-tables
aws ec2 describe-instance-types
aws ec2 describe-scheduled-instances
aws ec2 describe-security-groups
aws ec2 describe-security-group-rules
aws ec2 describe-snapshot-tier-status
aws ec2 describe-spot-fleet-requests
aws ec2 describe-spot-instance-requests
aws ec2 describe-store-image-tasks
aws ec2 describe-subnets
aws ec2 describe-tags
aws ec2 describe-traffic-mirror-filters
aws ec2 describe-traffic-mirror-sessions
aws ec2 describe-traffic-mirror-targets
aws ec2 describe-transit-gateway-attachments
aws ec2 describe-transit-gateway-connect-peers
aws ec2 describe-transit-gateway-connects
aws ec2 describe-transit-gateway-multicast-domains
aws ec2 describe-transit-gateway-peering-attachments
aws ec2 describe-transit-gateway-policy-tables
aws ec2 describe-transit-gateway-route-table-announcements
aws ec2 describe-transit-gateway-route-tables
aws ec2 describe-transit-gateway-vpc-attachments
aws ec2 describe-transit-gateways
aws ec2 describe-verified-access-endpoints
aws ec2 describe-verified-access-groups
aws ec2 describe-verified-access-instance-logging-configurations
aws ec2 describe-verified-access-instances
aws ec2 describe-verified-access-trust-providers
aws ec2 describe-volume-status
aws ec2 describe-volumes
aws ec2 describe-volumes-modifications
aws ec2 describe-vpc-classic-link
aws ec2 describe-vpc-classic-link-dns-support
aws ec2 describe-vpc-endpoint-connection-notifications
aws ec2 describe-vpc-endpoint-connections
aws ec2 describe-vpc-endpoint-service-configurations
aws ec2 describe-vpc-endpoints
aws ec2 describe-vpc-peering-connections
aws ec2 describe-vpcs
aws ec2 describe-vpn-connections
aws ec2 describe-vpn-gateways
aws ec2 get-ebs-default-kms-key-id
aws ec2 get-ebs-encryption-by-default
aws ec2 get-image-block-public-access-state
aws ec2 describe-vpc-endpoint-services
aws ec2 get-serial-console-access-status
aws ec2 get-vpn-connection-device-types
aws ec2 list-images-in-recycle-bin
aws ec2 list-snapshots-in-recycle-bin
aws ecr describe-pull-through-cache-rules
aws ecr describe-registry
aws ecr describe-repositories
aws ecr get-authorization-token
aws ecr get-login-password
aws ecr get-registry-scanning-configuration
aws ecr-public describe-registries
aws ecr-public describe-repositories
aws ecr-public get-authorization-token
aws ecr-public get-login-password
aws ecr-public get-registry-catalog-data
aws ecs describe-capacity-providers
aws ecs describe-clusters
aws ecs list-account-settings
aws ecs list-clusters
aws ecs list-task-definition-families
aws ecs list-task-definitions
aws efs describe-access-points
aws efs describe-account-preferences
aws efs describe-file-systems
aws eks describe-addon-versions
aws eks list-clusters
aws elastic-inference describe-accelerator-types
aws elastic-inference describe-accelerators
aws elasticache describe-cache-clusters
aws elasticache describe-cache-engine-versions
aws elasticache describe-cache-parameter-groups
aws elasticache describe-cache-subnet-groups
aws elasticache describe-events
aws elasticache describe-global-replication-groups
aws elasticache describe-replication-groups
aws elasticache describe-reserved-cache-nodes
aws elasticache describe-service-updates
aws elasticache describe-snapshots
aws elasticache describe-update-actions
aws elasticache describe-user-groups
aws elasticache describe-users
aws elasticbeanstalk describe-account-attributes
aws elasticbeanstalk describe-application-versions
aws elasticbeanstalk describe-applications
aws elasticbeanstalk describe-environments
aws elasticbeanstalk describe-events
aws elasticache describe-reserved-cache-nodes-offerings
aws elasticbeanstalk list-available-solution-stacks
aws elasticbeanstalk list-platform-branches
aws elasticbeanstalk list-platform-versions
aws elastictranscoder list-pipelines
aws elastictranscoder list-presets
aws elb describe-account-limits
aws elb describe-load-balancer-policy-types
aws elb describe-load-balancers
aws elb describe-load-balancer-policies
aws elbv2 describe-account-limits
aws elbv2 describe-load-balancers
aws elbv2 describe-ssl-policies
aws elbv2 describe-target-groups
aws emr get-block-public-access-configuration
aws emr list-clusters
aws emr list-notebook-executions
aws emr list-release-labels
aws emr list-security-configurations
aws emr list-studio-session-mappings
aws emr list-studios
aws emr-containers list-job-templates
aws emr-containers list-virtual-clusters
aws emr-serverless list-applications
aws entityresolution list-id-mapping-workflows
aws entityresolution list-matching-workflows
aws entityresolution list-provider-services
aws entityresolution list-schema-mappings
aws es describe-inbound-cross-cluster-search-connections
aws es describe-outbound-cross-cluster-search-connections
aws es describe-packages
aws es describe-reserved-elasticsearch-instances
aws es get-compatible-elasticsearch-versions
aws es list-domain-names
aws es describe-reserved-elasticsearch-instance-offerings
aws es list-elasticsearch-versions
aws es list-vpc-endpoints
aws events describe-event-bus
aws events list-api-destinations
aws events list-archives
aws events list-connections
aws events list-endpoints
aws events list-event-buses
aws events list-event-sources
aws events list-replays
aws events list-rules
aws evidently list-projects
aws evidently list-segments
aws evidently list-experiments
aws evidently list-features
aws evidently list-launches
aws finspace list-environments
aws finspace list-kx-environments
aws firehose list-delivery-streams
aws fis list-actions
aws fis list-experiment-templates
aws fis list-experiments
aws fis list-target-resource-types
aws forecast list-dataset-groups
aws forecast list-dataset-import-jobs
aws forecast list-datasets
aws forecast list-explainabilities
aws forecast list-explainability-exports
aws forecast list-forecast-export-jobs
aws forecast list-forecasts
aws forecast list-monitors
aws forecast list-predictor-backtest-export-jobs
aws forecast list-predictors
aws forecast list-what-if-analyses
aws forecast list-what-if-forecast-exports
aws forecast list-what-if-forecasts
aws frauddetector describe-model-versions
aws frauddetector get-batch-import-jobs
aws frauddetector get-batch-prediction-jobs
aws frauddetector get-detectors
aws frauddetector get-entity-types
aws frauddetector get-event-types
aws frauddetector get-external-models
aws frauddetector get-kms-encryption-key
aws frauddetector get-labels
aws frauddetector get-lists-metadata
aws frauddetector get-models
aws frauddetector get-outcomes
aws frauddetector get-variables
aws frauddetector list-event-predictions
aws fsx describe-backups
aws fsx describe-data-repository-associations
aws fsx describe-data-repository-tasks
aws fsx describe-file-caches
aws fsx describe-file-systems
aws fsx describe-snapshots
aws fsx describe-storage-virtual-machines
aws fsx describe-volumes
aws gamelift describe-ec2-instance-limits
aws gamelift describe-fleet-attributes
aws gamelift describe-fleet-capacity
aws gamelift describe-fleet-utilization
aws gamelift describe-game-session-queues
aws gamelift describe-matchmaking-configurations
aws gamelift describe-matchmaking-rule-sets
aws gamelift describe-vpc-peering-authorizations
aws gamelift describe-vpc-peering-connections
aws gamelift list-aliases
aws gamelift list-builds
aws gamelift list-fleets
aws gamelift list-game-server-groups
aws gamelift list-locations
aws gamelift list-scripts
aws glue get-catalog-import-status
aws glue get-classifiers
aws glue get-connections
aws glue get-crawler-metrics
aws glue get-crawlers
aws glue get-data-catalog-encryption-settings
aws glue get-databases
aws glue get-dev-endpoints
aws glue get-jobs
aws glue get-ml-transforms
aws glue get-resource-policies
aws glue get-security-configurations
aws glue get-triggers
aws glue list-blueprints
aws glue list-crawlers
aws glue list-custom-entity-types
aws glue get-user-defined-functions
aws glue list-data-quality-results
aws glue list-data-quality-rule-recommendation-runs
aws glue list-data-quality-ruleset-evaluation-runs
aws glue list-data-quality-rulesets
aws glue list-dev-endpoints
aws glue list-jobs
aws glue list-ml-transforms
aws glue list-registries
aws glue list-schemas
aws glue list-sessions
aws glue list-triggers
aws glue list-workflows
aws grafana list-versions
aws grafana list-workspaces
aws greengrass get-group-certificate-configuration
aws greengrass list-bulk-deployments
aws greengrass list-connector-definitions
aws greengrass list-core-definitions
aws greengrass list-bulk-deployment-detailed-reports
aws greengrass list-device-definitions
aws greengrass list-function-definitions
aws greengrass list-deployments
aws greengrass list-groups
aws greengrass list-logger-definitions
aws greengrass list-resource-definitions
aws greengrass list-subscription-definitions
aws greengrassv2 list-components
aws greengrassv2 list-core-devices
aws greengrassv2 list-deployments
aws greengrassv2 list-client-devices-associated-with-core-device
aws greengrassv2 list-effective-deployments
aws greengrassv2 list-installed-components
aws groundstation list-configs
aws groundstation list-dataflow-endpoint-groups
aws groundstation list-ground-stations
aws groundstation list-mission-profiles
aws groundstation list-satellites
aws guardduty get-invitations-count
aws guardduty list-detectors
aws guardduty list-invitations
aws guardduty list-organization-admin-accounts
aws healthlake list-fhir-datastores
aws iam get-account-summary
aws iam get-user
aws iam list-access-keys
aws iam list-account-aliases
aws iam get-account-authorization-details
aws iam list-groups
aws iam list-instance-profiles
aws iam list-mfa-devices
aws iam list-open-id-connect-providers
aws iam list-roles
aws iam list-saml-providers
aws iam list-policies
aws iam list-server-certificates
aws iam list-service-specific-credentials
aws iam list-signing-certificates
aws iam list-ssh-public-keys
aws iam list-users
aws iam list-virtual-mfa-devices
aws imagebuilder list-components
aws imagebuilder list-container-recipes
aws imagebuilder list-distribution-configurations
aws imagebuilder list-image-pipelines
aws imagebuilder list-image-recipes
aws imagebuilder list-image-scan-finding-aggregations
aws imagebuilder list-image-scan-findings
aws imagebuilder list-images
aws imagebuilder list-infrastructure-configurations
aws inspector describe-cross-account-access-role
aws inspector describe-assessment-runs
aws inspector describe-assessment-targets
aws inspector describe-assessment-templates
aws inspector describe-exclusions
aws inspector describe-findings
aws inspector describe-resource-groups
aws inspector list-assessment-runs
aws inspector describe-rules-packages
aws inspector list-assessment-targets
aws inspector list-assessment-templates
aws inspector list-event-subscriptions
aws inspector list-rules-packages
aws inspector list-findings
aws inspector2 get-ec2-deep-inspection-configuration
aws inspector2 list-account-permissions
aws inspector2 list-coverage
aws inspector2 list-coverage-statistics
aws inspector2 list-delegated-admin-accounts
aws inspector2 list-filters
aws inspector2 list-findings
aws inspector2 list-members
aws inspector2 list-usage-totals
aws internetmonitor list-monitors
aws internetmonitor list-health-events
aws iot describe-account-audit-configuration
aws iot describe-endpoint
aws iot describe-event-configurations
aws iot get-behavior-model-training-summaries
aws iot get-indexing-configuration
aws iot get-package-configuration
aws iot get-registration-code
aws iot list-active-violations
aws iot list-audit-suppressions
aws iot list-authorizers
aws iot list-billing-groups
aws iot list-ca-certificates
aws iot list-certificates
aws iot list-custom-metrics
aws iot list-dimensions
aws iot list-domain-configurations
aws iot list-fleet-metrics
aws iot list-indices
aws iot list-job-templates
aws iot list-jobs
aws iot list-managed-job-templates
aws iot list-mitigation-actions
aws iot list-job-executions-for-thing
aws iot list-ota-updates
aws iot list-outgoing-certificates
aws iot list-packages
aws iot list-policies
aws iot list-package-versions
aws iot list-provisioning-templates
aws iot list-role-aliases
aws iot list-scheduled-audits
aws iot list-security-profiles
aws iot list-streams
aws iot list-thing-groups
aws iot list-thing-registration-tasks
aws iot list-thing-types
aws iot list-things
aws iot list-topic-rule-destinations
aws iot list-topic-rules
aws iot-data list-retained-messages
aws iot-data list-named-shadows-for-thing
aws iotanalytics list-channels
aws iotanalytics list-datasets
aws iotanalytics list-datastores
aws iotanalytics list-pipelines
aws iotdeviceadvisor get-endpoint
aws iotdeviceadvisor list-suite-definitions
aws iotdeviceadvisor list-suite-runs
aws iotevents list-alarm-models
aws iotevents list-detector-models
aws iotevents list-inputs
aws iotfleethub list-applications
aws iotfleetwise get-encryption-configuration
aws iotfleetwise get-logging-options
aws iotfleetwise list-campaigns
aws iotfleetwise list-decoder-manifests
aws iotfleetwise list-fleets
aws iotfleetwise list-model-manifests
aws iotfleetwise list-signal-catalogs
aws iotfleetwise list-vehicles
aws iotsecuretunneling list-tunnels
aws iotsitewise describe-default-encryption-configuration
aws iotsitewise describe-logging-options
aws iotsitewise describe-storage-configuration
aws iotsitewise list-asset-models
aws iotsitewise list-bulk-import-jobs
aws iotsitewise list-gateways
aws iotsitewise list-portals
aws iotsitewise list-time-series
aws iottwinmaker get-pricing-plan
aws iottwinmaker list-workspaces
aws iottwinmaker list-sync-jobs
aws iotwireless get-event-configuration-by-resource-types
aws iotwireless get-log-levels-by-resource-types
aws iotwireless get-service-endpoint
aws iotwireless list-destinations
aws iotwireless list-device-profiles
aws iotwireless list-fuota-tasks
aws iotwireless list-multicast-groups
aws iotwireless list-network-analyzer-configurations
aws iotwireless list-partner-accounts
aws iotwireless list-service-profiles
aws iotwireless list-wireless-device-import-tasks
aws iotwireless list-wireless-devices
aws iotwireless list-wireless-gateway-task-definitions
aws iotwireless list-wireless-gateways
aws ivs list-channels
aws ivs list-playback-key-pairs
aws ivs list-recording-configurations
aws ivs list-streams
aws ivs-realtime list-stages
aws ivschat list-logging-configurations
aws ivschat list-rooms
aws kafka get-compatible-kafka-versions
aws kafka list-clusters
aws kafka list-clusters-v2
aws kafka list-configurations
aws kafka list-kafka-versions
aws kafka list-replicators
aws kafka list-vpc-connections
aws kafkaconnect list-connectors
aws kafkaconnect list-custom-plugins
aws kafkaconnect list-worker-configurations
aws kendra list-indices
aws kendra-ranking list-rescore-execution-plans
aws keyspaces list-keyspaces
aws keyspaces list-tables
aws kinesis describe-limits
aws kinesis list-streams
aws kinesis-video-archived-media get-dash-streaming-session-url
aws kinesis-video-archived-media get-hls-streaming-session-url
aws kinesis-video-archived-media list-fragments
aws kinesis-video-signaling get-ice-server-config
aws kinesisanalytics list-applications
aws kinesisanalyticsv2 list-applications
aws kinesisvideo list-signaling-channels
aws kinesisvideo list-streams
aws kms describe-custom-key-stores
aws kms list-aliases
aws kms list-keys
aws lakeformation get-data-lake-settings
aws lakeformation list-data-cells-filter
aws lakeformation list-lf-tags
aws lakeformation list-permissions
aws lakeformation list-resources
aws lakeformation list-transactions
aws lakeformation list-table-storage-optimizers
aws lambda get-account-settings
aws lambda list-code-signing-configs
aws lambda list-event-source-mappings
aws lambda list-functions
aws lambda list-layers
aws lambda list-layer-versions
aws lex-models get-bots
aws lex-models get-bot-aliases
aws lex-models get-builtin-intents
aws lex-models get-builtin-slot-types
aws lex-models get-bot-versions
aws lex-models get-intents
aws lex-models get-bot-channel-associations
aws lex-models get-migrations
aws lex-models get-slot-types
aws lex-models get-intent-versions
aws lex-models get-slot-type-versions
aws lexv2-models list-bots
aws lexv2-models list-exports
aws lexv2-models list-imports
aws lexv2-models list-test-executions
aws lexv2-models list-test-sets
aws license-manager-linux-subscriptions get-service-settings
aws lightsail get-active-names
aws lightsail get-alarms
aws lightsail get-blueprints
aws lightsail get-bucket-bundles
aws lightsail get-buckets
aws lightsail get-bundles
aws lightsail get-certificates
aws lightsail get-cloud-formation-stack-records
aws lightsail get-contact-methods
aws lightsail get-container-api-metadata
aws lightsail get-container-service-powers
aws lightsail get-container-services
aws lightsail get-disk-snapshots
aws lightsail get-disks
aws lightsail get-distribution-bundles
aws lightsail get-distributions
aws lightsail get-domains
aws lightsail get-export-snapshot-records
aws lightsail get-instance-snapshots
aws lightsail get-instances
aws lightsail get-key-pairs
aws lightsail get-load-balancer-tls-policies
aws lightsail get-load-balancers
aws lightsail get-operations
aws lightsail get-regions
aws lightsail get-relational-database-bundles
aws lightsail get-relational-database-blueprints
aws lightsail get-relational-database-snapshots
aws lightsail get-relational-databases
aws lightsail get-static-ips
aws location list-geofence-collections
aws location list-keys
aws location list-maps
aws location list-place-indexes
aws location list-route-calculators
aws location list-trackers
aws logs describe-destinations
aws logs describe-export-tasks
aws logs describe-log-groups
aws logs describe-metric-filters
aws logs describe-queries
aws logs describe-query-definitions
aws logs describe-resource-policies
aws lookoutequipment list-data-ingestion-jobs
aws lookoutequipment list-datasets
aws lookoutequipment list-inference-schedulers
aws lookoutequipment list-label-groups
aws lookoutequipment list-models
aws lookoutequipment list-retraining-schedulers
aws lookoutequipment list-inference-executions
aws lookoutequipment list-labels
aws lookoutequipment list-model-versions
aws lookoutmetrics list-alerts
aws lookoutmetrics list-anomaly-detectors
aws lookoutmetrics list-metric-sets
aws lookoutvision list-projects
aws m2 get-signed-bluinsights-url
aws m2 list-applications
aws m2 list-engine-versions
aws m2 list-environments
aws macie2 get-invitations-count
aws macie2 list-invitations
aws macie2 list-organization-admin-accounts
aws managedblockchain list-accessors
aws managedblockchain list-invitations
aws managedblockchain list-networks
aws marketplace-entitlement get-entitlements
aws mediaconnect list-bridges
aws mediaconnect list-entitlements
aws mediaconnect list-flows
aws mediaconnect list-gateway-instances
aws mediaconnect list-gateways
aws mediaconnect list-offerings
aws mediaconnect list-reservations
aws mediaconvert describe-endpoints
aws mediaconvert get-policy
aws mediaconvert list-job-templates
aws mediaconvert list-jobs
aws mediaconvert list-presets
aws mediaconvert list-queues
aws medialive describe-account-configuration
aws medialive list-channels
aws medialive list-input-devices
aws medialive list-input-security-groups
aws medialive list-inputs
aws medialive list-multiplexes
aws medialive list-reservations
aws medialive list-multiplex-programs
aws medialive list-offerings
aws mediapackage list-channels
aws mediapackage list-harvest-jobs
aws mediapackage list-origin-endpoints
aws mediapackage-vod list-assets
aws mediapackage-vod list-packaging-configurations
aws mediapackage-vod list-packaging-groups
aws mediapackagev2 list-channel-groups
aws mediastore list-containers
aws mediatailor list-channels
aws mediatailor list-playback-configurations
aws mediatailor list-source-locations
aws medical-imaging list-datastores
aws memorydb describe-acls
aws memorydb describe-clusters
aws memorydb describe-engine-versions
aws memorydb describe-events
aws memorydb describe-parameter-groups
aws memorydb describe-reserved-nodes
aws memorydb describe-service-updates
aws memorydb describe-reserved-nodes-offerings
aws memorydb describe-snapshots
aws memorydb describe-subnet-groups
aws memorydb describe-users
aws mgh list-application-states
aws mgh list-migration-tasks
aws mgh list-progress-update-streams
aws migration-hub-refactor-spaces list-environments
aws migrationhub-config describe-home-region-controls
aws migrationhub-config get-home-region
aws migrationhuborchestrator list-plugins
aws migrationhuborchestrator list-templates
aws migrationhuborchestrator list-workflows
aws migrationhubstrategy get-portfolio-preferences
aws migrationhubstrategy get-portfolio-summary
aws migrationhubstrategy list-application-components
aws migrationhubstrategy list-collectors
aws migrationhubstrategy list-import-file-task
aws migrationhubstrategy list-servers
aws mq describe-broker-engine-types
aws mq describe-broker-instance-options
aws mq list-brokers
aws mq list-configurations
aws <string>:: (ERROR/3) Anonymous hyperlink mismatch: 2 references but 0 targets.ia get-media-for-fra
aws See "backrefs" attribute for IDs.
aws mwaa list-environments
aws neptune describe-db-cluster-endpoints
aws neptune describe-db-cluster-parameter-groups
aws neptune describe-db-cluster-snapshots
aws neptune describe-db-clusters
aws neptune describe-db-instances
aws neptune describe-db-parameter-groups
aws neptune describe-db-subnet-groups
aws neptune describe-event-categories
aws neptune describe-event-subscriptions
aws neptune describe-events
aws neptune describe-global-clusters
aws neptune describe-pending-maintenance-actions
aws neptune describe-db-engine-versions
aws network-firewall list-firewall-policies
aws network-firewall list-firewalls
aws network-firewall list-rule-groups
aws network-firewall list-tls-inspection-configurations
aws networkmanager describe-global-networks
aws networkmanager list-attachments
aws networkmanager list-connect-peers
aws networkmanager list-core-networks
aws networkmanager list-organization-service-access-status
aws networkmanager list-peerings
aws nimble list-studios
aws oam list-links
aws oam list-sinks
aws omics list-annotation-import-jobs
aws omics list-annotation-stores
aws omics list-reference-stores
aws omics list-run-groups
aws omics list-runs
aws omics list-sequence-stores
aws omics list-workflows
aws omics list-variant-stores
aws opensearch describe-inbound-connections
aws opensearch describe-outbound-connections
aws opensearch describe-packages
aws opensearch describe-reserved-instances
aws opensearch describe-reserved-instance-offerings
aws opensearch get-compatible-versions
aws opensearch list-domain-names
aws opensearch list-versions
aws opensearch list-vpc-endpoints
aws opensearchserverless get-account-settings
aws opensearchserverless get-policies-stats
aws opensearchserverless list-collections
aws opensearchserverless list-vpc-endpoints
aws organizations describe-organization
aws organizations list-accounts
aws organizations list-aws-service-access-for-organization
aws organizations list-create-account-status
aws organizations list-delegated-administrators
aws organizations list-handshakes-for-account
aws organizations list-handshakes-for-organization
aws organizations list-roots
aws osis list-pipeline-blueprints
aws osis list-pipelines
aws outposts list-catalog-items
aws outposts list-orders
aws outposts list-outposts
aws outposts list-sites
aws panorama list-application-instances
aws panorama list-devices
aws panorama list-devices-jobs
aws panorama list-node-from-template-jobs
aws panorama list-nodes
aws panorama list-package-import-jobs
aws panorama list-packages
aws payment-cryptography list-aliases
aws payment-cryptography list-keys
aws pca-connector-ad list-connectors
aws pca-connector-ad list-directory-registrations
aws personalize list-batch-inference-jobs
aws personalize list-batch-segment-jobs
aws personalize list-campaigns
aws personalize list-dataset-export-jobs
aws personalize list-dataset-groups
aws personalize list-dataset-import-jobs
aws personalize list-datasets
aws personalize list-event-trackers
aws personalize list-filters
aws personalize list-metric-attributions
aws personalize list-recipes
aws personalize list-recommenders
aws personalize list-schemas
aws personalize list-solution-versions
aws personalize list-solutions
aws pinpoint get-apps
aws pinpoint get-recommender-configurations
aws pinpoint list-templates
aws pinpoint-email get-account
aws pinpoint-email get-dedicated-ips
aws pinpoint-email get-deliverability-dashboard-options
aws pinpoint-email get-blacklist-reports
aws pinpoint-email list-configuration-sets
aws pinpoint-email list-dedicated-ip-pools
aws pinpoint-email list-deliverability-test-reports
aws pinpoint-email list-email-identities
aws pinpoint-sms-voice-v2 describe-account-attributes
aws pinpoint-sms-voice-v2 describe-account-limits
aws pinpoint-sms-voice-v2 describe-configuration-sets
aws pinpoint-sms-voice-v2 describe-opt-out-lists
aws pinpoint-sms-voice-v2 describe-phone-numbers
aws pinpoint-sms-voice-v2 describe-pools
aws pinpoint-sms-voice-v2 describe-sender-ids
aws pinpoint-sms-voice-v2 describe-spend-limits
aws pipes list-pipes
aws polly describe-voices
aws polly list-lexicons
aws polly list-speech-synthesis-tasks
aws pricing describe-services
aws pricing get-products
aws pricing get-attribute-values
aws proton get-account-settings
aws privatenetworks list-networks
aws proton get-resources-summary
aws proton get-service-sync-blocker-summary
aws proton list-components
aws proton list-deployments
aws proton get-service-instance-sync-status
aws proton list-environment-templates
aws proton list-environments
aws proton list-repositories
aws proton list-service-instances
aws proton list-environment-template-versions
aws proton list-service-templates
aws proton list-services
aws proton list-service-template-versions
aws qldb list-journal-s3-exports
aws qldb list-ledgers
aws ram get-resource-share-invitations
aws ram list-permission-associations
aws ram list-replace-permission-associations-work
aws ram list-permissions
aws ram list-resource-types
aws rds describe-account-attributes
aws rds describe-blue-green-deployments
aws rds describe-certificates
aws rds describe-db-cluster-automated-backups
aws rds describe-db-cluster-endpoints
aws rds describe-db-cluster-parameter-groups
aws rds describe-db-cluster-snapshots
aws rds describe-db-clusters
aws rds describe-db-instance-automated-backups
aws rds describe-db-instances
aws rds describe-db-parameter-groups
aws rds describe-db-proxies
aws rds describe-db-proxy-endpoints
aws rds describe-db-security-groups
aws rds describe-db-snapshots
aws rds describe-db-subnet-groups
aws rds describe-event-categories
aws rds describe-event-subscriptions
aws rds describe-events
aws rds describe-export-tasks
aws rds describe-global-clusters
aws rds describe-option-groups
aws rds describe-pending-maintenance-actions
aws rds describe-reserved-db-instances
aws rds describe-source-regions
aws redshift describe-account-attributes
aws redshift describe-authentication-profiles
aws redshift describe-cluster-db-revisions
aws redshift describe-cluster-parameter-groups
aws rds describe-db-engine-versions
aws redshift describe-cluster-snapshots
aws redshift describe-cluster-subnet-groups
aws redshift describe-cluster-tracks
aws redshift describe-cluster-versions
aws redshift describe-clusters
aws redshift describe-custom-domain-associations
aws redshift describe-data-shares
aws redshift describe-data-shares-for-consumer
aws redshift describe-data-shares-for-producer
aws redshift describe-endpoint-access
aws redshift describe-endpoint-authorization
aws redshift describe-event-subscriptions
aws redshift describe-events
aws redshift describe-event-categories
aws redshift describe-hsm-client-certificates
aws redshift describe-hsm-configurations
aws redshift describe-orderable-cluster-options
aws redshift describe-reserved-nodes
aws redshift describe-reserved-node-offerings
aws redshift describe-scheduled-actions
aws redshift describe-snapshot-copy-grants
aws redshift describe-snapshot-schedules
aws redshift describe-tags
aws redshift describe-usage-limits
aws rds describe-reserved-db-instances-offerings
aws redshift describe-storage
aws redshift-data list-statements
aws redshift-serverless list-endpoint-access
aws redshift-serverless list-namespaces
aws redshift-serverless list-recovery-points
aws redshift-serverless list-snapshots
aws redshift-serverless list-usage-limits
aws redshift-serverless list-workgroups
aws rekognition describe-projects
aws rekognition list-collections
aws rekognition list-stream-processors
aws resiliencehub list-app-assessments
aws resiliencehub list-apps
aws resiliencehub list-resiliency-policies
aws resiliencehub list-suggested-resiliency-policies
aws resource-explorer-2 list-indexes
aws resource-explorer-2 list-supported-resource-types
aws resource-explorer-2 list-views
aws resource-groups get-account-settings
aws resource-groups list-groups
aws resourcegroupstaggingapi get-resources
aws resourcegroupstaggingapi get-tag-keys
aws resourcegroupstaggingapi get-tag-values
aws robomaker list-robot-applications
aws robomaker list-simulation-applications
aws robomaker list-simulation-job-batches
aws robomaker list-simulation-jobs
aws robomaker list-world-export-jobs
aws robomaker list-world-generation-jobs
aws robomaker list-world-templates
aws robomaker list-worlds
aws rolesanywhere list-crls
aws rolesanywhere list-profiles
aws rolesanywhere list-subjects
aws rolesanywhere list-trust-anchors
aws route53 get-checker-ip-ranges
aws route53 get-geo-location
aws route53 get-health-check-count
aws route53 get-hosted-zone-count
aws route53 get-traffic-policy-instance-count
aws route53 list-cidr-collections
aws route53 list-health-checks
aws route53 list-geo-locations
aws route53 list-hosted-zones
aws route53 list-hosted-zones-by-name
aws route53 list-query-logging-configs
aws route53 list-reusable-delegation-sets
aws route53 list-traffic-policies
aws route53 list-traffic-policy-instances
aws route53domains list-domains
aws route53domains list-operations
aws route53domains list-prices
aws route53resolver get-outpost-resolver
aws route53resolver list-firewall-configs
aws route53resolver list-firewall-domain-lists
aws route53resolver list-firewall-rule-group-associations
aws route53resolver list-firewall-rule-groups
aws route53resolver list-outpost-resolvers
aws route53resolver list-resolver-configs
aws route53resolver list-resolver-dnssec-configs
aws route53resolver list-resolver-endpoints
aws route53resolver list-resolver-query-log-config-associations
aws route53resolver list-resolver-query-log-configs
aws route53resolver list-resolver-rule-associations
aws route53resolver list-resolver-rules
aws rum list-app-monitors
aws s3api list-buckets
aws s3outposts list-endpoints
aws s3outposts list-outposts-with-s3
aws sagemaker get-sagemaker-servicecatalog-portfolio-status
aws sagemaker list-actions
aws sagemaker list-algorithms
aws sagemaker list-app-image-configs
aws sagemaker list-apps
aws sagemaker list-artifacts
aws sagemaker list-auto-ml-jobs
aws sagemaker list-code-repositories
aws sagemaker list-compilation-jobs
aws sagemaker list-contexts
aws sagemaker list-data-quality-job-definitions
aws sagemaker list-domains
aws sagemaker list-candidates-for-auto-ml-job
aws sagemaker list-endpoint-configs
aws sagemaker list-endpoints
aws sagemaker list-experiments
aws sagemaker list-feature-groups
aws sagemaker list-flow-definitions
aws sagemaker list-hubs
aws sagemaker list-human-task-uis
aws sagemaker list-hyper-parameter-tuning-jobs
aws sagemaker list-images
aws sagemaker list-inference-experiments
aws sagemaker list-inference-recommendations-jobs
aws sagemaker list-labeling-jobs
aws sagemaker list-lineage-groups
aws sagemaker list-model-bias-job-definitions
aws sagemaker list-model-cards
aws sagemaker list-model-explainability-job-definitions
aws sagemaker list-model-metadata
aws sagemaker list-model-package-groups
aws sagemaker list-model-packages
aws sagemaker list-model-card-export-jobs
aws sagemaker list-model-quality-job-definitions
aws sagemaker list-models
aws sagemaker list-monitoring-alert-history
aws sagemaker list-monitoring-executions
aws sagemaker list-monitoring-schedules
aws sagemaker list-notebook-instance-lifecycle-configs
aws sagemaker list-notebook-instances
aws sagemaker list-pipelines
aws sagemaker list-processing-jobs
aws sagemaker list-projects
aws sagemaker list-spaces
aws sagemaker list-resource-catalogs
aws sagemaker list-studio-lifecycle-configs
aws sagemaker list-subscribed-workteams
aws sagemaker list-training-jobs
aws sagemaker list-transform-jobs
aws sagemaker list-trial-components
aws sagemaker list-trials
aws sagemaker list-user-profiles
aws sagemaker list-workforces
aws sagemaker list-workteams
aws savingsplans describe-savings-plans
aws savingsplans describe-savings-plans-offerings
aws savingsplans describe-savings-plans-offering-rates
aws scheduler list-schedule-groups
aws scheduler list-schedules
aws schemas list-discoverers
aws schemas list-registries
aws sdb list-domains
aws secretsmanager get-random-password
aws secretsmanager list-secrets
aws securityhub describe-standards
aws securityhub list-organization-admin-accounts
aws securityhub list-security-control-definitions
aws serverlessrepo list-applications
aws service-quotas list-requested-service-quota-change-history
aws service-quotas list-service-quota-increase-requests-in-template
aws service-quotas list-services
aws servicecatalog get-aws-organizations-access-status
aws servicecatalog list-accepted-portfolio-shares
aws servicecatalog list-portfolios
aws servicecatalog list-provisioned-product-plans
aws servicecatalog list-record-history
aws servicecatalog list-service-actions
aws servicecatalog-appregistry get-configuration
aws servicecatalog-appregistry list-applications
aws servicecatalog-appregistry list-attribute-groups
aws servicediscovery list-namespaces
aws servicediscovery list-operations
aws servicediscovery list-services
aws ses describe-active-receipt-rule-set
aws ses get-account-sending-enabled
aws ses get-send-quota
aws ses get-identity-dkim-attributes
aws ses get-send-statistics
aws ses get-identity-mail-from-domain-attributes
aws ses get-identity-notification-attributes
aws ses list-configuration-sets
aws ses list-custom-verification-email-templates
aws ses list-identities
aws ses get-identity-verification-attributes
aws ses list-receipt-filters
aws ses list-receipt-rule-sets
aws ses get-identity-policies
aws ses list-templates
aws ses list-identity-policies
aws sesv2 get-account
aws sesv2 get-blacklist-reports
aws sesv2 get-dedicated-ips
aws sesv2 get-deliverability-dashboard-options
aws sesv2 list-configuration-sets
aws sesv2 list-contact-lists
aws sesv2 list-custom-verification-email-templates
aws sesv2 list-dedicated-ip-pools
aws sesv2 list-deliverability-test-reports
aws sesv2 list-email-identities
aws sesv2 list-email-templates
aws sesv2 list-export-jobs
aws sesv2 list-recommendations
aws sesv2 list-suppressed-destinations
aws shield describe-attack-statistics
aws shield describe-attack
aws shield get-subscription-state
aws shield list-attacks
aws signer list-signing-jobs
aws signer list-signing-platforms
aws signer list-signing-profiles
aws simspaceweaver list-simulations
aws snowball describe-addresses
aws snowball get-snowball-usage
aws snowball list-clusters
aws snowball list-jobs
aws snowball list-compatible-images
aws snowball list-long-term-pricing
aws sns get-sms-attributes
aws sns get-sms-sandbox-account-status
aws sns list-origination-numbers
aws sns list-phone-numbers-opted-out
aws sns list-platform-applications
aws sns list-sms-sandbox-phone-numbers
aws sns list-subscriptions
aws <string>:: (ERROR/3) Anonymous hyperlink mismatch: 1 references but 0 targets.
aws See "backrefs" attribute for IDs.
aws sns list-topics
aws sqs list-queues
aws ssm describe-activations
aws ssm describe-automation-executions
aws ssm describe-instance-information
aws ssm describe-inventory-deletions
aws ssm describe-instance-patch-states-for-patch-group
aws ssm describe-maintenance-windows
aws ssm describe-ops-items
aws ssm describe-parameters
aws ssm describe-patch-baselines
aws ssm describe-patch-groups
aws ssm describe-patch-group-state
aws ssm get-default-patch-baseline
aws ssm get-inventory
aws ssm get-inventory-schema
aws ssm get-connection-status
aws ssm get-ops-summary
aws ssm list-associations
aws ssm get-parameters
aws ssm list-command-invocations
aws ssm list-commands
aws ssm list-compliance-summaries
aws ssm get-patch-baseline-for-patch-group
aws ssm list-ops-item-events
aws ssm list-ops-metadata
aws ssm list-resource-compliance-summaries
aws ssm list-resource-data-sync
aws ssm-contacts list-contacts
aws ssm-contacts list-engagements
aws ssm-incidents list-incident-records
aws ssm-incidents list-replication-sets
aws ssm-incidents list-response-plans
aws ssm list-documents
aws ssm-sap list-applications
aws ssm-sap list-components
aws ssm-sap list-databases
aws sso-admin list-instances
aws stepfunctions list-activities
aws stepfunctions list-state-machines
aws storagegateway describe-tape-archives
aws storagegateway list-automatic-tape-creation-policies
aws storagegateway list-file-shares
aws storagegateway list-file-system-associations
aws storagegateway list-gateways
aws storagegateway list-tape-pools
aws storagegateway list-tapes
aws storagegateway list-volumes
aws sts get-caller-identity
aws sts get-session-token
aws sts get-federation-token
aws support-app get-account-alias
aws support-app list-slack-channel-configurations
aws support-app list-slack-workspace-configurations
aws synthetics describe-canaries
aws synthetics describe-canaries-last-run
aws synthetics describe-runtime-versions
aws synthetics list-groups
aws textract list-adapter-versions
aws textract list-adapters
aws timestream-query describe-endpoints
aws timestream-query list-scheduled-queries
aws timestream-write describe-endpoints
aws timestream-write list-batch-load-tasks
aws timestream-write list-databases
aws timestream-write list-tables
aws tnb list-sol-function-instances
aws tnb list-sol-function-packages
aws tnb list-sol-network-instances
aws tnb list-sol-network-operations
aws tnb list-sol-network-packages
aws transcribe list-call-analytics-categories
aws transcribe list-call-analytics-jobs
aws transcribe list-language-models
aws transcribe list-medical-transcription-jobs
aws transcribe list-medical-vocabularies
aws transcribe list-transcription-jobs
aws transcribe list-vocabularies
aws transcribe list-vocabulary-filters
aws transfer list-certificates
aws transfer list-connectors
aws transfer list-profiles
aws transfer list-security-policies
aws transfer list-servers
aws transfer list-workflows
aws translate list-languages
aws translate list-parallel-data
aws translate list-terminologies
aws translate list-text-translation-jobs
aws verifiedpermissions list-policy-stores
aws voice-id list-domains
aws vpc-lattice list-service-networks
aws vpc-lattice list-services
aws vpc-lattice list-target-groups
aws waf get-change-token
aws waf list-byte-match-sets
aws waf list-geo-match-sets
aws waf list-ip-sets
aws waf list-rate-based-rules
aws waf list-regex-match-sets
aws waf list-regex-pattern-sets
aws waf list-rule-groups
aws waf list-rules
aws waf list-size-constraint-sets
aws waf list-sql-injection-match-sets
aws waf list-subscribed-rule-groups
aws waf list-web-acls
aws waf list-xss-match-sets
aws waf-regional get-change-token
aws waf-regional list-byte-match-sets
aws waf-regional list-geo-match-sets
aws waf-regional list-ip-sets
aws waf-regional list-rate-based-rules
aws waf-regional list-regex-match-sets
aws waf-regional list-regex-pattern-sets
aws waf-regional list-rule-groups
aws waf-regional list-rules
aws waf-regional list-size-constraint-sets
aws waf-regional list-sql-injection-match-sets
aws waf-regional list-subscribed-rule-groups
aws waf-regional list-web-acls
aws waf-regional list-xss-match-sets
aws wellarchitected get-profile-template
aws wellarchitected list-lenses
aws wellarchitected list-notifications
aws wellarchitected list-profile-notifications
aws wellarchitected list-profiles
aws wellarchitected list-review-templates
aws wellarchitected list-share-invitations
aws wellarchitected list-workloads
aws wisdom list-assistants
aws wisdom list-knowledge-bases
aws workmail list-organizations
aws workspaces describe-applications
aws workspaces describe-connection-aliases
aws workspaces describe-ip-groups
aws workspaces describe-workspace-bundles
aws workspaces describe-workspace-directories
aws workspaces describe-workspace-images
aws workspaces describe-workspaces
aws workspaces describe-workspaces-connection-status
aws workspaces-web list-browser-settings
aws workspaces-web list-ip-access-settings
aws workspaces-web list-network-settings
aws workspaces-web list-portals
aws workspaces-web list-trust-stores
aws workspaces-web list-user-access-logging-settings
aws workspaces-web list-user-settings
aws xray get-encryption-config
aws xray get-groups
aws xray get-sampling-rules
aws xray get-sampling-statistic-summaries
aws xray list-resource-policies

carlospolop/bf-aws-permissions

Brute Force AWS Permissions

Quick start

Find even more permissions

Known "False Positives"

All actions it can detect