{
  "arn:aws:iam::aws:policy/AWSDirectConnectReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "directconnect:Describe*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonGlacierReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "glacier:ListVaults",
            "glacier:DescribeVault",
            "glacier:GetVaultNotifications",
            "glacier:ListJobs",
            "glacier:DescribeJob",
            "glacier:GetJobOutput"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSMarketplaceFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "aws-marketplace:*",
            "cloudformation:CreateStack",
            "cloudformation:DescribeStackResource",
            "cloudformation:DescribeStackResources",
            "cloudformation:DescribeStacks",
            "cloudformation:List*",
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateSecurityGroup",
            "ec2:CreateTags",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeAddresses",
            "ec2:DeleteSecurityGroup",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeImages",
            "ec2:DescribeInstances",
            "ec2:DescribeKeyPairs",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeTags",
            "ec2:DescribeVpcs",
            "ec2:RunInstances",
            "ec2:StartInstances",
            "ec2:StopInstances",
            "ec2:TerminateInstances"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonRDSFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "rds:*",
            "cloudwatch:DescribeAlarms",
            "cloudwatch:GetMetricStatistics",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "sns:ListSubscriptions",
            "sns:ListTopics"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonEC2FullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "ec2:*",
          "Effect": "Allow",
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": "elasticloadbalancing:*",
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": "cloudwatch:*",
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": "autoscaling:*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSElasticBeanstalkReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "elasticbeanstalk:Check*",
            "elasticbeanstalk:Describe*",
            "elasticbeanstalk:List*",
            "elasticbeanstalk:RequestEnvironmentInfo",
            "elasticbeanstalk:RetrieveEnvironmentInfo",
            "ec2:Describe*",
            "elasticloadbalancing:Describe*",
            "autoscaling:Describe*",
            "cloudwatch:Describe*",
            "cloudwatch:List*",
            "cloudwatch:Get*",
            "s3:Get*",
            "s3:List*",
            "sns:Get*",
            "sns:List*",
            "cloudformation:Describe*",
            "cloudformation:Get*",
            "cloudformation:List*",
            "cloudformation:Validate*",
            "cloudformation:Estimate*",
            "rds:Describe*",
            "sqs:Get*",
            "sqs:List*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonSQSFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "sqs:*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSLambdaFullAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudwatch:*",
            "cognito-identity:ListIdentityPools",
            "cognito-sync:GetCognitoEvents",
            "cognito-sync:SetCognitoEvents",
            "dynamodb:*",
            "iam:ListAttachedRolePolicies",
            "iam:ListRolePolicies",
            "iam:ListRoles",
            "iam:PassRole",
            "kinesis:DescribeStream",
            "kinesis:ListStreams",
            "kinesis:PutRecord",
            "lambda:*",
            "logs:*",
            "s3:*",
            "sns:ListSubscriptions",
            "sns:ListSubscriptionsByTopic",
            "sns:ListTopics",
            "sns:Subscribe",
            "sns:Unsubscribe"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudwatch:PutMetricData",
            "ds:CreateComputer",
            "ds:DescribeDirectories",
            "logs:CreateLogGroup",
            "logs:CreateLogStream",
            "logs:DescribeLogGroups",
            "logs:DescribeLogStreams",
            "logs:PutLogEvents",
            "ssm:DescribeAssociation",
            "ssm:GetDocument",
            "ssm:ListAssociations",
            "ssm:UpdateAssociationStatus"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSCloudHSMRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ec2:CreateNetworkInterface",
            "ec2:CreateTags",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeNetworkInterfaceAttribute",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:DetachNetworkInterface"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/IAMFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "iam:*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElastiCacheFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "elasticache:*",
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforAWSCodeDeploy": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "s3:GetObject",
            "s3:GetObjectVersion",
            "s3:ListObjects"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSOpsWorksFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "opsworks:*",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeKeyPairs",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "elasticloadbalancing:DescribeInstanceHealth",
            "elasticloadbalancing:DescribeLoadBalancers",
            "iam:GetRolePolicy",
            "iam:ListInstanceProfiles",
            "iam:ListRoles",
            "iam:ListUsers",
            "iam:PassRole"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceRole": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Resource": "*",
          "Action": [
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CancelSpotInstanceRequests",
            "ec2:CreateSecurityGroup",
            "ec2:CreateTags",
            "ec2:DeleteTags",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeInstances",
            "ec2:DescribeInstanceStatus",
            "ec2:DescribeKeyPairs",
            "ec2:DescribePrefixLists",
            "ec2:DescribeRouteTables",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSpotInstanceRequests",
            "ec2:DescribeSpotPriceHistory",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcAttribute",
            "ec2:DescribeVpcEndpoints",
            "ec2:DescribeVpcEndpointServices",
            "ec2:DescribeVpcs",
            "ec2:ModifyImageAttribute",
            "ec2:ModifyInstanceAttribute",
            "ec2:RequestSpotInstances",
            "ec2:RunInstances",
            "ec2:TerminateInstances",
            "iam:GetRole",
            "iam:GetRolePolicy",
            "iam:ListInstanceProfiles",
            "iam:ListRolePolicies",
            "iam:PassRole",
            "s3:CreateBucket",
            "s3:Get*",
            "s3:List*",
            "sdb:BatchPutAttributes",
            "sdb:Select",
            "sqs:CreateQueue",
            "sqs:Delete*",
            "sqs:GetQueue*",
            "sqs:ReceiveMessage"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonRoute53DomainsReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "route53domains:Get*",
            "route53domains:List*"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSOpsWorksRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudwatch:GetMetricStatistics",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeInstances",
            "ec2:DescribeKeyPairs",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "elasticloadbalancing:DescribeInstanceHealth",
            "elasticloadbalancing:DescribeLoadBalancers",
            "iam:GetRolePolicy",
            "iam:ListInstanceProfiles",
            "iam:ListRoles",
            "iam:ListUsers",
            "iam:PassRole",
            "opsworks:*",
            "rds:*"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/SimpleWorkflowFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "swf:*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonS3FullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "s3:*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSStorageGatewayReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "storagegateway:List*",
            "storagegateway:Describe*"
          ],
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "ec2:DescribeSnapshots"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceforEC2Role": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Resource": "*",
          "Action": [
            "cloudwatch:*",
            "dynamodb:*",
            "ec2:Describe*",
            "elasticmapreduce:Describe*",
            "elasticmapreduce:ListBootstrapActions",
            "elasticmapreduce:ListClusters",
            "elasticmapreduce:ListInstanceGroups",
            "elasticmapreduce:ListInstances",
            "elasticmapreduce:ListSteps",
            "kinesis:CreateStream",
            "kinesis:DeleteStream",
            "kinesis:DescribeStream",
            "kinesis:GetRecords",
            "kinesis:GetShardIterator",
            "kinesis:MergeShards",
            "kinesis:PutRecord",
            "kinesis:SplitShard",
            "rds:Describe*",
            "s3:*",
            "sdb:*",
            "sns:*",
            "sqs:*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonRedshiftReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "redshift:Describe*",
            "redshift:ViewQueriesInConsole",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeAddresses",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:DescribeInternetGateways",
            "sns:Get*",
            "sns:List*",
            "cloudwatch:Describe*",
            "cloudwatch:List*",
            "cloudwatch:Get*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "ec2:Describe*",
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": "elasticloadbalancing:Describe*",
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "cloudwatch:ListMetrics",
            "cloudwatch:GetMetricStatistics",
            "cloudwatch:Describe*"
          ],
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": "autoscaling:Describe*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElasticMapReduceReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "elasticmapreduce:Describe*",
            "elasticmapreduce:List*",
            "s3:GetObject",
            "s3:ListAllMyBuckets",
            "s3:ListBucket",
            "sdb:Select",
            "cloudwatch:GetMetricStatistics"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSDirectoryServiceReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "ds:Check*",
            "ds:Describe*",
            "ds:Get*",
            "ds:List*",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonVPCReadOnlyAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ec2:DescribeAddresses",
            "ec2:DescribeCustomerGateways",
            "ec2:DescribeDhcpOptions",
            "ec2:DescribeInternetGateways",
            "ec2:DescribeNetworkAcls",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribePrefixLists",
            "ec2:DescribeRouteTables",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcAttribute",
            "ec2:DescribeVpcEndpoints",
            "ec2:DescribeVpcEndpointServices",
            "ec2:DescribeVpcPeeringConnection",
            "ec2:DescribeVpcs",
            "ec2:DescribeVpnConnections",
            "ec2:DescribeVpnGateways"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMobileAnalyticsFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "mobileanalytics:*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSDataPipelineRole": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudwatch:*",
            "datapipeline:DescribeObjects",
            "datapipeline:EvaluateExpression",
            "dynamodb:BatchGetItem",
            "dynamodb:DescribeTable",
            "dynamodb:GetItem",
            "dynamodb:Query",
            "dynamodb:Scan",
            "dynamodb:UpdateTable",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CancelSpotInstanceRequests",
            "ec2:CreateSecurityGroup",
            "ec2:CreateTags",
            "ec2:DeleteTags",
            "ec2:Describe*",
            "ec2:ModifyImageAttribute",
            "ec2:ModifyInstanceAttribute",
            "ec2:RequestSpotInstances",
            "ec2:RunInstances",
            "ec2:StartInstances",
            "ec2:StopInstances",
            "ec2:TerminateInstances",
            "elasticmapreduce:*",
            "iam:GetRole",
            "iam:GetRolePolicy",
            "iam:ListRolePolicies",
            "iam:ListInstanceProfiles",
            "iam:PassRole",
            "rds:DescribeDBInstances",
            "rds:DescribeDBSecurityGroups",
            "redshift:DescribeClusters",
            "redshift:DescribeClusterSecurityGroups",
            "s3:CreateBucket",
            "s3:DeleteObject",
            "s3:Get*",
            "s3:List*",
            "s3:Put*",
            "sdb:BatchPutAttributes",
            "sdb:Select*",
            "sns:GetTopicAttributes",
            "sns:ListTopics",
            "sns:Publish",
            "sns:Subscribe",
            "sns:Unsubscribe"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/CloudWatchFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "autoscaling:Describe*",
            "cloudwatch:*",
            "logs:*",
            "sns:*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/ReadOnlyAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "appstream:Get*",
            "autoscaling:Describe*",
            "cloudformation:DescribeStacks",
            "cloudformation:DescribeStackEvents",
            "cloudformation:DescribeStackResource",
            "cloudformation:DescribeStackResources",
            "cloudformation:GetTemplate",
            "cloudformation:List*",
            "cloudfront:Get*",
            "cloudfront:List*",
            "cloudtrail:DescribeTrails",
            "cloudtrail:GetTrailStatus",
            "cloudwatch:Describe*",
            "cloudwatch:Get*",
            "cloudwatch:List*",
            "directconnect:Describe*",
            "dynamodb:GetItem",
            "dynamodb:BatchGetItem",
            "dynamodb:Query",
            "dynamodb:Scan",
            "dynamodb:DescribeTable",
            "dynamodb:ListTables",
            "ec2:Describe*",
            "ecs:Describe*",
            "ecs:List*",
            "elasticache:Describe*",
            "elasticbeanstalk:Check*",
            "elasticbeanstalk:Describe*",
            "elasticbeanstalk:List*",
            "elasticbeanstalk:RequestEnvironmentInfo",
            "elasticbeanstalk:RetrieveEnvironmentInfo",
            "elasticloadbalancing:Describe*",
            "elasticmapreduce:Describe*",
            "elasticmapreduce:List*",
            "elastictranscoder:Read*",
            "elastictranscoder:List*",
            "iam:List*",
            "iam:GenerateCredentialReport",
            "iam:Get*",
            "kinesis:Describe*",
            "kinesis:Get*",
            "kinesis:List*",
            "opsworks:Describe*",
            "opsworks:Get*",
            "route53:Get*",
            "route53:List*",
            "redshift:Describe*",
            "redshift:ViewQueriesInConsole",
            "rds:Describe*",
            "rds:ListTagsForResource",
            "s3:Get*",
            "s3:List*",
            "sdb:GetAttributes",
            "sdb:List*",
            "sdb:Select*",
            "ses:Get*",
            "ses:List*",
            "sns:Get*",
            "sns:List*",
            "sqs:GetQueueAttributes",
            "sqs:ListQueues",
            "sqs:ReceiveMessage",
            "storagegateway:List*",
            "storagegateway:Describe*",
            "tag:get*",
            "trustedadvisor:Describe*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMachineLearningBatchPredictionsAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "machinelearning:CreateBatchPrediction",
            "machinelearning:DeleteBatchPrediction",
            "machinelearning:DescribeBatchPredictions",
            "machinelearning:GetBatchPrediction",
            "machinelearning:UpdateBatchPrediction"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSCodeDeployReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "codedeploy:Batch*",
            "codedeploy:Get*",
            "codedeploy:List*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/CloudSearchFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "cloudsearch:*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSCloudHSMFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "cloudhsm:*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonEC2SpotFleetRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ec2:DescribeImages",
            "ec2:DescribeSubnets",
            "ec2:RequestSpotInstances",
            "ec2:TerminateInstances"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElasticTranscoderJobsSubmitter": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "elastictranscoder:Read*",
            "elastictranscoder:List*",
            "elastictranscoder:*Job",
            "elastictranscoder:*Preset",
            "s3:List*",
            "iam:List*",
            "sns:List*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSDirectoryServiceFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "ds:*",
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateNetworkInterface",
            "ec2:CreateSecurityGroup",
            "ec2:DeleteNetworkInterface",
            "ec2:DeleteSecurityGroup",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:RevokeSecurityGroupEgress",
            "ec2:RevokeSecurityGroupIngress"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "dynamodb:*",
            "cloudwatch:DeleteAlarms",
            "cloudwatch:DescribeAlarmHistory",
            "cloudwatch:DescribeAlarms",
            "cloudwatch:DescribeAlarmsForMetric",
            "cloudwatch:GetMetricStatistics",
            "cloudwatch:ListMetrics",
            "cloudwatch:PutMetricAlarm",
            "datapipeline:ActivatePipeline",
            "datapipeline:CreatePipeline",
            "datapipeline:DeletePipeline",
            "datapipeline:DescribeObjects",
            "datapipeline:DescribePipelines",
            "datapipeline:GetPipelineDefinition",
            "datapipeline:ListPipelines",
            "datapipeline:PutPipelineDefinition",
            "datapipeline:QueryObjects",
            "iam:ListRoles",
            "sns:CreateTopic",
            "sns:DeleteTopic",
            "sns:ListSubscriptions",
            "sns:ListSubscriptionsByTopic",
            "sns:ListTopics",
            "sns:Subscribe",
            "sns:Unsubscribe"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonSESReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ses:Get*",
            "ses:List*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AutoScalingNotificationAccessRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Resource": "*",
          "Action": [
            "sqs:SendMessage",
            "sqs:GetQueueUrl",
            "sns:Publish"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "kinesis:Get*",
            "kinesis:List*",
            "kinesis:Describe*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSCodeDeployFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "codedeploy:*",
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSLambdaDynamoDBExecutionRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "dynamodb:DescribeStream",
            "dynamodb:GetRecords",
            "dynamodb:GetShardIterator",
            "dynamodb:ListStreams",
            "logs:CreateLogGroup",
            "logs:CreateLogStream",
            "logs:PutLogEvents"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonRoute53DomainsFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "route53:CreateHostedZone",
            "route53domains:*"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "elasticache:Describe*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElasticFileSystemReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeNetworkInterfaceAttribute",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "elasticfilesystem:Describe*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/CloudFrontFullAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "s3:ListAllMyBuckets"
          ],
          "Effect": "Allow",
          "Resource": "arn:aws:s3:::*"
        },
        {
          "Action": [
            "cloudfront:*",
            "iam:ListServerCertificates"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonMachineLearningRoleforRedshiftDataSource": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateSecurityGroup",
            "ec2:DescribeInternetGateways",
            "ec2:DescribeSecurityGroups",
            "ec2:RevokeSecurityGroupIngress",
            "redshift:AuthorizeClusterSecurityGroupIngress",
            "redshift:CreateClusterSecurityGroup",
            "redshift:DescribeClusters",
            "redshift:DescribeClusterSecurityGroups",
            "redshift:ModifyCluster",
            "redshift:RevokeClusterSecurityGroupIngress",
            "s3:GetBucketLocation",
            "s3:GetBucketPolicy",
            "s3:GetObject",
            "s3:PutBucketPolicy",
            "s3:PutObject"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMobileAnalyticsNon-financialReportAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "mobileanalytics:GetReports",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSCloudTrailFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "sns:AddPermission",
            "sns:CreateTopic",
            "sns:DeleteTopic",
            "sns:ListTopics",
            "sns:SetTopicAttributes"
          ],
          "Resource": "arn:aws:sns:*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "s3:CreateBucket",
            "s3:DeleteBucket",
            "s3:ListAllMyBuckets",
            "s3:PutBucketPolicy",
            "s3:ListBucket",
            "s3:GetBucketLocation",
            "s3:GetObject"
          ],
          "Resource": "arn:aws:s3:::*"
        },
        {
          "Effect": "Allow",
          "Action": "cloudtrail:*",
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "logs:CreateLogGroup"
          ],
          "Resource": "arn:aws:logs:*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "iam:PassRole",
            "iam:ListRoles",
            "iam:GetRolePolicy"
          ],
          "Resource": "arn:aws:iam::*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonCognitoDeveloperAuthenticatedIdentities": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cognito-identity:GetOpenIdTokenForDeveloperIdentity",
            "cognito-identity:LookupDeveloperIdentity",
            "cognito-identity:MergeDeveloperIdentities",
            "cognito-identity:UnlinkDeveloperIdentity"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSConfigRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudtrail:DescribeTrails",
            "ec2:Describe*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonRedshiftFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "redshift:*",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeAddresses",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:DescribeInternetGateways",
            "sns:CreateTopic",
            "sns:Get*",
            "sns:List*",
            "cloudwatch:Describe*",
            "cloudwatch:Get*",
            "cloudwatch:List*",
            "cloudwatch:PutMetricAlarm",
            "cloudwatch:EnableAlarmActions",
            "cloudwatch:DisableAlarmActions"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonZocaloReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "zocalo:Describe*",
            "ds:DescribeDirectories",
            "ec2:DescribeVpcs",
            "ec2:DescribeSubnets"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSCloudHSMReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudhsm:Get*",
            "cloudhsm:List*",
            "cloudhsm:Describe*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonRoute53ReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "route53:Get*",
            "route53:List*"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonEC2ReportsAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "ec2-reports:*",
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonSQSReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "sqs:GetQueueAttributes",
            "sqs:ListQueues"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonKinesisFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "kinesis:*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMachineLearningReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "machinelearning:Describe*",
            "machinelearning:Get*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/RDSCloudHsmAuthorizationRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudhsm:CreateLunaClient",
            "cloudhsm:GetClientConfiguration",
            "cloudhsm:DeleteLunaClient",
            "cloudhsm:DescribeLunaClient",
            "cloudhsm:ModifyLunaClient",
            "cloudhsm:DescribeHapg",
            "cloudhsm:ModifyHapg",
            "cloudhsm:GetConfig"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMachineLearningFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "machinelearning:*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AdministratorAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMachineLearningRealTimePredictionOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "machinelearning:Predict"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSConfigUserAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "config:Get*",
            "config:Describe*",
            "config:Deliver*",
            "tag:GetResources",
            "tag:GetTagKeys"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/SecurityAudit": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "autoscaling:Describe*",
            "cloudformation:DescribeStack*",
            "cloudformation:GetTemplate",
            "cloudformation:ListStack*",
            "cloudfront:Get*",
            "cloudfront:List*",
            "cloudwatch:Describe*",
            "directconnect:Describe*",
            "dynamodb:ListTables",
            "ec2:Describe*",
            "ecs:Describe*",
            "ecs:List*",
            "elasticbeanstalk:Describe*",
            "elasticache:Describe*",
            "elasticloadbalancing:Describe*",
            "elasticmapreduce:DescribeJobFlows",
            "glacier:ListVaults",
            "iam:GenerateCredentialReport",
            "iam:Get*",
            "iam:List*",
            "rds:Describe*",
            "rds:DownloadDBLogFilePortion",
            "rds:ListTagsForResource",
            "redshift:Describe*",
            "route53:GetHostedZone",
            "route53:ListHostedZones",
            "route53:ListResourceRecordSets",
            "s3:GetBucket*",
            "s3:GetLifecycleConfiguration",
            "s3:GetObjectAcl",
            "s3:GetObjectVersionAcl",
            "s3:ListAllMyBuckets",
            "sdb:DomainMetadata",
            "sdb:ListDomains",
            "sns:GetTopicAttributes",
            "sns:ListTopics",
            "sqs:GetQueueAttributes",
            "sqs:ListQueues"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonDynamoDBReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "cloudwatch:DescribeAlarmHistory",
            "cloudwatch:DescribeAlarms",
            "cloudwatch:DescribeAlarmsForMetric",
            "cloudwatch:GetMetricStatistics",
            "cloudwatch:ListMetrics",
            "datapipeline:DescribeObjects",
            "datapipeline:DescribePipelines",
            "datapipeline:GetPipelineDefinition",
            "datapipeline:ListPipelines",
            "datapipeline:QueryObjects",
            "dynamodb:BatchGetItem",
            "dynamodb:DescribeTable",
            "dynamodb:GetItem",
            "dynamodb:ListTables",
            "dynamodb:Query",
            "dynamodb:Scan",
            "sns:ListSubscriptionsByTopic",
            "sns:ListTopics"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonSNSReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "sns:GetTopicAttributes",
            "sns:List*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElasticMapReduceFullAccess": {
    "VersionId": "v3",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "cloudwatch:*",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CancelSpotInstanceRequests",
            "ec2:CreateSecurityGroup",
            "ec2:CreateTags",
            "ec2:DeleteTags",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeInstances",
            "ec2:DescribeKeyPairs",
            "ec2:DescribeRouteTables",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSpotInstanceRequests",
            "ec2:DescribeSpotPriceHistory",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcAttribute",
            "ec2:DescribeVpcs",
            "ec2:ModifyImageAttribute",
            "ec2:ModifyInstanceAttribute",
            "ec2:RequestSpotInstances",
            "ec2:RunInstances",
            "ec2:TerminateInstances",
            "elasticmapreduce:*",
            "iam:GetPolicy",
            "iam:GetPolicyVersion",
            "iam:ListRoles",
            "iam:PassRole",
            "kms:List*",
            "s3:*",
            "sdb:*",
            "support:CreateCase",
            "support:DescribeServices",
            "support:DescribeSeverityLevels"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "s3:Get*",
            "s3:List*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSElasticBeanstalkFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "elasticbeanstalk:*",
            "ec2:*",
            "elasticloadbalancing:*",
            "autoscaling:*",
            "cloudwatch:*",
            "s3:*",
            "sns:*",
            "cloudformation:*",
            "rds:*",
            "sqs:*",
            "iam:PassRole"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSCodeDeployRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "autoscaling:CompleteLifecycleAction",
            "autoscaling:DeleteLifecycleHook",
            "autoscaling:DescribeAutoScalingGroups",
            "autoscaling:DescribeLifecycleHooks",
            "autoscaling:PutLifecycleHook",
            "autoscaling:RecordLifecycleActionHeartbeat",
            "ec2:DescribeInstances",
            "ec2:DescribeInstanceStatus",
            "tag:GetTags",
            "tag:GetResources"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonSESFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ses:*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/CloudWatchLogsReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "logs:Describe*",
            "logs:Get*",
            "logs:TestMetricFilter"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSOpsWorksRegisterCLI": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "opsworks:AssignInstance",
            "opsworks:CreateStack",
            "opsworks:CreateLayer",
            "opsworks:DeregisterInstance",
            "opsworks:DescribeInstances",
            "opsworks:DescribeStackProvisioningParameters",
            "opsworks:DescribeStacks",
            "opsworks:UnassignInstance"
          ],
          "Resource": [
            "*"
          ]
        },
        {
          "Effect": "Allow",
          "Action": [
            "ec2:DescribeInstances"
          ],
          "Resource": [
            "*"
          ]
        },
        {
          "Effect": "Allow",
          "Action": [
            "iam:AddUserToGroup",
            "iam:CreateAccessKey",
            "iam:CreateGroup",
            "iam:CreateUser",
            "iam:ListInstanceProfiles",
            "iam:PassRole",
            "iam:PutUserPolicy"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccesswithDataPipeline": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "cloudwatch:DeleteAlarms",
            "cloudwatch:DescribeAlarmHistory",
            "cloudwatch:DescribeAlarms",
            "cloudwatch:DescribeAlarmsForMetric",
            "cloudwatch:GetMetricStatistics",
            "cloudwatch:ListMetrics",
            "cloudwatch:PutMetricAlarm",
            "dynamodb:*",
            "sns:CreateTopic",
            "sns:DeleteTopic",
            "sns:ListSubscriptions",
            "sns:ListSubscriptionsByTopic",
            "sns:ListTopics",
            "sns:Subscribe",
            "sns:Unsubscribe"
          ],
          "Effect": "Allow",
          "Resource": "*",
          "Sid": "DDBConsole"
        },
        {
          "Action": [
            "datapipeline:*",
            "iam:ListRoles"
          ],
          "Effect": "Allow",
          "Resource": "*",
          "Sid": "DDBConsoleImportExport"
        },
        {
          "Effect": "Allow",
          "Action": [
            "iam:GetRolePolicy",
            "iam:PassRole"
          ],
          "Resource": [
            "*"
          ],
          "Sid": "IAMEDPRoles"
        },
        {
          "Action": [
            "ec2:CreateTags",
            "ec2:DescribeInstances",
            "ec2:RunInstances",
            "ec2:StartInstances",
            "ec2:StopInstances",
            "ec2:TerminateInstances",
            "elasticmapreduce:*",
            "datapipeline:*"
          ],
          "Effect": "Allow",
          "Resource": "*",
          "Sid": "EMR"
        },
        {
          "Action": [
            "s3:DeleteObject",
            "s3:Get*",
            "s3:List*",
            "s3:Put*"
          ],
          "Effect": "Allow",
          "Resource": [
            "*"
          ],
          "Sid": "S3"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforDataPipelineRole": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudwatch:*",
            "datapipeline:*",
            "dynamodb:*",
            "ec2:Describe*",
            "elasticmapreduce:AddJobFlowSteps",
            "elasticmapreduce:Describe*",
            "elasticmapreduce:ListInstance*",
            "rds:Describe*",
            "redshift:DescribeClusters",
            "redshift:DescribeClusterSecurityGroups",
            "s3:*",
            "sdb:*",
            "sns:*",
            "sqs:*"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "logs:*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElasticTranscoderFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "elastictranscoder:*",
            "cloudfront:*",
            "s3:List*",
            "s3:Put*",
            "s3:Get*",
            "s3:*MultipartUpload*",
            "iam:CreateRole",
            "iam:GetRolePolicy",
            "iam:PassRole",
            "iam:PutRolePolicy",
            "iam:List*",
            "sns:CreateTopic",
            "sns:List*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMobileAnalyticsWriteOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "mobileanalytics:PutEvents",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSConnector": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "iam:GetUser",
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "s3:ListAllMyBuckets"
          ],
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "s3:CreateBucket",
            "s3:DeleteBucket",
            "s3:DeleteObject",
            "s3:GetBucketLocation",
            "s3:GetObject",
            "s3:ListBucket",
            "s3:PutObject",
            "s3:PutObjectAcl"
          ],
          "Resource": "arn:aws:s3:::import-to-ec2-*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "ec2:CancelConversionTask",
            "ec2:CancelExportTask",
            "ec2:CreateImage",
            "ec2:CreateInstanceExportTask",
            "ec2:CreateTags",
            "ec2:CreateVolume",
            "ec2:DeleteTags",
            "ec2:DeleteVolume",
            "ec2:DescribeConversionTasks",
            "ec2:DescribeExportTasks",
            "ec2:DescribeImages",
            "ec2:DescribeInstanceAttribute",
            "ec2:DescribeInstanceStatus",
            "ec2:DescribeInstances",
            "ec2:DescribeRegions",
            "ec2:DescribeTags",
            "ec2:DetachVolume",
            "ec2:ImportInstance",
            "ec2:ImportVolume",
            "ec2:ModifyInstanceAttribute",
            "ec2:RunInstances",
            "ec2:StartInstances",
            "ec2:StopInstances",
            "ec2:TerminateInstances"
          ],
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "SNS:Publish"
          ],
          "Resource": "arn:aws:sns:*:*:metrics-sns-topic-for-*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonSSMFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudwatch:PutMetricData",
            "ds:CreateComputer",
            "ds:DescribeDirectories",
            "ec2:DescribeInstanceStatus",
            "logs:*",
            "ssm:*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonEC2ContainerServiceFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ec2:Describe*",
            "elasticloadbalancing:*",
            "ecs:*",
            "iam:ListInstanceProfiles",
            "iam:ListRoles",
            "iam:PassRole"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonCognitoReadOnly": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cognito-identity:Describe*",
            "cognito-identity:Get*",
            "cognito-identity:List*",
            "cognito-sync:Describe*",
            "cognito-sync:Get*",
            "cognito-sync:List*",
            "iam:ListOpenIdConnectProviders",
            "iam:ListRoles",
            "sns:ListPlatformApplications"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonVPCFullAccess": {
    "VersionId": "v3",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ec2:AcceptVpcPeeringConnection",
            "ec2:AllocateAddress",
            "ec2:AssociateAddress",
            "ec2:AssociateDhcpOptions",
            "ec2:AssociateRouteTable",
            "ec2:AttachClassicLinkVpc",
            "ec2:AttachInternetGateway",
            "ec2:AttachVpnGateway",
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateCustomerGateway",
            "ec2:CreateDhcpOptions",
            "ec2:CreateInternetGateway",
            "ec2:CreateNetworkAcl",
            "ec2:CreateNetworkAclEntry",
            "ec2:CreateRoute",
            "ec2:CreateRouteTable",
            "ec2:CreateSecurityGroup",
            "ec2:CreateSubnet",
            "ec2:CreateTags",
            "ec2:CreateVpc",
            "ec2:CreateVpcEndpoint",
            "ec2:CreateVpcPeeringConnection",
            "ec2:CreateVpnConnection",
            "ec2:CreateVpnConnectionRoute",
            "ec2:CreateVpnGateway",
            "ec2:DeleteCustomerGateway",
            "ec2:DeleteDhcpOptions",
            "ec2:DeleteInternetGateway",
            "ec2:DeleteNetworkAcl",
            "ec2:DeleteNetworkAclEntry",
            "ec2:DeleteRoute",
            "ec2:DeleteRouteTable",
            "ec2:DeleteSecurityGroup",
            "ec2:DeleteSubnet",
            "ec2:DeleteTags",
            "ec2:DeleteVpc",
            "ec2:DeleteVpcEndpoints",
            "ec2:DeleteVpcPeeringConnection",
            "ec2:DeleteVpnConnection",
            "ec2:DeleteVpnGateway",
            "ec2:DescribeAddresses",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeCustomerGateways",
            "ec2:DescribeDhcpOptions",
            "ec2:DescribeInstances",
            "ec2:DescribeInternetGateways",
            "ec2:DescribeKeyPairs",
            "ec2:DescribeNetworkAcls",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribePrefixLists",
            "ec2:DescribeRouteTables",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeTags",
            "ec2:DescribeVpcAttribute",
            "ec2:DescribeVpcClassicLink",
            "ec2:DescribeVpcEndpoints",
            "ec2:DescribeVpcEndpointServices",
            "ec2:DescribeVpcPeeringConnections",
            "ec2:DescribeVpcs",
            "ec2:DescribeVpnConnections",
            "ec2:DescribeVpnGateways",
            "ec2:DetachClassicLinkVpc",
            "ec2:DetachInternetGateway",
            "ec2:DetachVpnGateway",
            "ec2:DisableVpcClassicLink",
            "ec2:DisableVgwRoutePropagation",
            "ec2:DisassociateAddress",
            "ec2:DisassociateRouteTable",
            "ec2:EnableVpcClassicLink",
            "ec2:EnableVgwRoutePropagation",
            "ec2:ModifySubnetAttribute",
            "ec2:ModifyVpcAttribute",
            "ec2:ModifyVpcEndpoint",
            "ec2:RejectVpcPeeringConnection",
            "ec2:ReleaseAddress",
            "ec2:ReplaceNetworkAclAssociation",
            "ec2:ReplaceNetworkAclEntry",
            "ec2:ReplaceRouteTableAssociation",
            "ec2:RevokeSecurityGroupEgress",
            "ec2:RevokeSecurityGroupIngress"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSImportExportFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "importexport:*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMachineLearningCreateOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "machinelearning:Create*",
            "machinelearning:Delete*",
            "machinelearning:Describe*",
            "machinelearning:Get*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSCloudTrailReadOnlyAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "s3:GetObject"
          ],
          "Resource": "arn:aws:s3:::*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "cloudtrail:GetTrailStatus",
            "cloudtrail:DescribeTrails",
            "cloudtrail:LookupEvents",
            "s3:ListAllMyBuckets"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSLambdaExecute": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "logs:*"
          ],
          "Resource": "arn:aws:logs:*:*:*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "s3:GetObject",
            "s3:PutObject"
          ],
          "Resource": "arn:aws:s3:::*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSStorageGatewayFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "storagegateway:*"
          ],
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "ec2:DescribeSnapshots",
            "ec2:DeleteSnapshot"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElasticTranscoderReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "elastictranscoder:Read*",
            "elastictranscoder:List*",
            "s3:List*",
            "iam:List*",
            "sns:List*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonWorkMailReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ses:Describe*",
            "ses:Get*",
            "workmail:Describe*",
            "workmail:Get*",
            "workmail:List*",
            "workmail:Search*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSLambdaKinesisExecutionRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "kinesis:DescribeStream",
            "kinesis:GetRecords",
            "kinesis:GetShardIterator",
            "kinesis:ListStreams",
            "logs:CreateLogGroup",
            "logs:CreateLogStream",
            "logs:PutLogEvents"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/ResourceGroupsandTagEditorReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "tag:getResources",
            "tag:getTagKeys",
            "tag:getTagValues"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMachineLearningManageRealTimeEndpointOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "machinelearning:CreateRealtimeEndpoint",
            "machinelearning:DeleteRealtimeEndpoint"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/CloudFrontReadOnlyAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "cloudfront:Get*",
            "cloudfront:List*",
            "iam:ListServerCertificates",
            "route53:List*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonSNSRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "logs:CreateLogGroup",
            "logs:CreateLogStream",
            "logs:PutLogEvents",
            "logs:PutMetricFilter",
            "logs:PutRetentionPolicy"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonMobileAnalyticsFinancialReportAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "mobileanalytics:GetReports",
            "mobileanalytics:GetFinancialReports"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/IAMReadOnlyAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "iam:GenerateCredentialReport",
            "iam:GenerateServiceLastAccessedDetails",
            "iam:Get*",
            "iam:List*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "rds:Describe*",
            "rds:ListTagsForResource",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeVpcs"
          ],
          "Effect": "Allow",
          "Resource": "*"
        },
        {
          "Action": [
            "cloudwatch:GetMetricStatistics"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonCognitoPowerUser": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cognito-identity:*",
            "cognito-sync:*",
            "iam:ListRoles",
            "iam:ListOpenIdConnectProviders",
            "sns:ListPlatformApplications"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonElasticFileSystemFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "ec2:CreateNetworkInterface",
            "ec2:DeleteNetworkInterface",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeNetworkInterfaceAttribute",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:ModifyNetworkInterfaceAttribute",
            "elasticfilesystem:*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonZocaloFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "zocalo:*",
            "ds:*",
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateNetworkInterface",
            "ec2:CreateSecurityGroup",
            "ec2:CreateSubnet",
            "ec2:CreateTags",
            "ec2:CreateVpc",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeNetworkInterfaces",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:DeleteNetworkInterface",
            "ec2:DeleteSecurityGroup",
            "ec2:RevokeSecurityGroupEgress",
            "ec2:RevokeSecurityGroupIngress"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSLambdaReadOnlyAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudwatch:Describe*",
            "cloudwatch:Get*",
            "cloudwatch:List*",
            "cognito-identity:ListIdentityPools",
            "cognito-sync:GetCognitoEvents",
            "dynamodb:BatchGetItem",
            "dynamodb:DescribeStream",
            "dynamodb:DescribeTable",
            "dynamodb:GetItem",
            "dynamodb:ListStreams",
            "dynamodb:ListTables",
            "dynamodb:Query",
            "dynamodb:Scan",
            "iam:ListRoles",
            "kinesis:DescribeStream",
            "kinesis:ListStreams",
            "lambda:List*",
            "lambda:Get*",
            "logs:DescribeMetricFilters",
            "logs:GetLogEvents",
            "logs:DescribeLogGroups",
            "logs:DescribeLogStreams",
            "s3:Get*",
            "s3:List*",
            "sns:ListTopics",
            "sns:ListSubscriptions",
            "sns:ListSubscriptionsByTopic"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSAccountUsageReportAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "aws-portal:ViewUsage"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ecs:CreateCluster",
            "ecs:DeregisterContainerInstance",
            "ecs:DiscoverPollEndpoint",
            "ecs:Poll",
            "ecs:RegisterContainerInstance",
            "ecs:Submit*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonAppStreamFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "appstream:*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/CloudWatchReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "autoscaling:Describe*",
            "cloudwatch:Describe*",
            "cloudwatch:Get*",
            "cloudwatch:List*",
            "logs:Get*",
            "logs:Describe*",
            "logs:TestMetricFilter",
            "sns:Get*",
            "sns:List*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "logs:CreateLogGroup",
            "logs:CreateLogStream",
            "logs:PutLogEvents"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/ResourceGroupsandTagEditorFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "tag:getResources",
            "tag:getTagKeys",
            "tag:getTagValues",
            "tag:addResourceTags",
            "tag:removeResourceTags"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "kms:CreateAlias",
            "kms:CreateKey",
            "kms:DeleteAlias",
            "kms:Describe*",
            "kms:GenerateRandom",
            "kms:Get*",
            "kms:List*",
            "iam:ListGroups",
            "iam:ListRoles",
            "iam:ListUsers"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSImportExportReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "importexport:ListJobs",
            "importexport:GetStatus"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonElasticTranscoderRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "1",
          "Effect": "Allow",
          "Action": [
            "s3:ListBucket",
            "s3:Put*",
            "s3:Get*",
            "s3:*MultipartUpload*"
          ],
          "Resource": [
            "*"
          ]
        },
        {
          "Sid": "2",
          "Effect": "Allow",
          "Action": [
            "sns:Publish"
          ],
          "Resource": [
            "*"
          ]
        },
        {
          "Sid": "3",
          "Effect": "Deny",
          "Action": [
            "s3:*Policy*",
            "sns:*Permission*",
            "sns:*Delete*",
            "s3:*Delete*",
            "sns:*Remove*"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:Describe*",
            "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
            "elasticloadbalancing:Describe*",
            "elasticloadbalancing:RegisterInstancesWithLoadBalancer"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonSSMReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ssm:Describe*",
            "ssm:Get*",
            "ssm:List*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSMarketplaceRead-only": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "aws-marketplace:ViewSubscriptions",
            "ec2:DescribeAccountAttributes",
            "ec2:DescribeAddresses",
            "ec2:DescribeImages",
            "ec2:DescribeInstances",
            "ec2:DescribeKeyPairs",
            "ec2:DescribeSecurityGroups",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonWorkSpacesApplicationManagerAdminAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "wam:AuthenticatePackager",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "directconnect:*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSAccountActivityAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "aws-portal:ViewBilling"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonGlacierFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "glacier:*",
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonWorkMailFullAccess": {
    "VersionId": "v2",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "ds:AuthorizeApplication",
            "ds:CheckAlias",
            "ds:CreateAlias",
            "ds:CreateDirectory",
            "ds:CreateDomain",
            "ds:DeleteAlias",
            "ds:DeleteDirectory",
            "ds:DescribeDirectories",
            "ds:ExtendDirectory",
            "ds:GetDirectoryLimits",
            "ds:ListAuthorizedApplications",
            "ds:UnauthorizeApplication",
            "ec2:AuthorizeSecurityGroupEgress",
            "ec2:AuthorizeSecurityGroupIngress",
            "ec2:CreateNetworkInterface",
            "ec2:CreateSecurityGroup",
            "ec2:CreateSubnet",
            "ec2:CreateTags",
            "ec2:CreateVpc",
            "ec2:DeleteSecurityGroup",
            "ec2:DeleteSubnet",
            "ec2:DeleteVpc",
            "ec2:DescribeAvailabilityZones",
            "ec2:DescribeDomains",
            "ec2:DescribeRouteTables",
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:RevokeSecurityGroupEgress",
            "ec2:RevokeSecurityGroupIngress",
            "kms:DescribeKey",
            "kms:ListAliases",
            "ses:*",
            "workmail:*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSMarketplaceManageSubscriptions": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "aws-marketplace:ViewSubscriptions",
            "aws-marketplace:Subscribe",
            "aws-marketplace:Unsubscribe"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSSupportAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "support:*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSLambdaInvocation-DynamoDB": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "lambda:InvokeFunction"
          ],
          "Resource": "*"
        },
        {
          "Effect": "Allow",
          "Action": [
            "dynamodb:DescribeStream",
            "dynamodb:GetRecords",
            "dynamodb:GetShardIterator",
            "dynamodb:ListStreams"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSCodeDeployDeployerAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "codedeploy:Batch*",
            "codedeploy:CreateDeployment",
            "codedeploy:Get*",
            "codedeploy:List*",
            "codedeploy:RegisterApplicationRevision"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSDataPipelinePowerUser": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "s3:List*",
            "dynamodb:DescribeTable",
            "rds:DescribeDBInstances",
            "rds:DescribeDBSecurityGroups",
            "redshift:DescribeClusters",
            "redshift:DescribeClusterSecurityGroups",
            "sns:ListTopics",
            "iam:PassRole",
            "iam:ListRoles",
            "iam:PutRolePolicy",
            "iam:GetRolePolicy",
            "iam:GetInstanceProfiles",
            "iam:ListInstanceProfiles",
            "iam:CreateInstanceProfile",
            "iam:AddRoleToInstanceProfile",
            "datapipeline:*",
            "cloudwatch:*"
          ],
          "Effect": "Allow",
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonSNSFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "sns:*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/CloudSearchReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "cloudsearch:Describe*",
            "cloudsearch:List*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cloudformation:DescribeStacks",
            "cloudformation:DescribeStackEvents",
            "cloudformation:DescribeStackResource",
            "cloudformation:DescribeStackResources",
            "cloudformation:GetTemplate",
            "cloudformation:List*"
          ],
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonRoute53FullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "route53:*"
          ],
          "Resource": [
            "*"
          ]
        },
        {
          "Effect": "Allow",
          "Action": [
            "elasticloadbalancing:DescribeLoadBalancers"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/service-role/AWSLambdaRole": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "lambda:InvokeFunction"
          ],
          "Resource": [
            "*"
          ]
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AmazonAppStreamReadOnlyAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "appstream:Get*"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/PowerUserAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "NotAction": "iam:*",
          "Resource": "*"
        }
      ]
    }
  },
  "arn:aws:iam::aws:policy/AWSDataPipelineFullAccess": {
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": [
            "s3:List*",
            "dynamodb:DescribeTable",
            "rds:DescribeDBInstances",
            "rds:DescribeDBSecurityGroups",
            "redshift:DescribeClusters",
            "redshift:DescribeClusterSecurityGroups",
            "sns:CreateTopic",
            "sns:ListTopics",
            "sns:Subscribe",
            "iam:PassRole",
            "iam:ListRoles",
            "iam:CreateRole",
            "iam:PutRolePolicy",
            "iam:GetRolePolicy",
            "iam:GetInstanceProfiles",
            "iam:ListInstanceProfiles",
            "iam:CreateInstanceProfile",
            "iam:AddRoleToInstanceProfile",
            "datapipeline:*",
            "cloudwatch:*"
          ],
          "Effect": "Allow",
          "Resource": [
            "*"
          ]
        }
      ]
    }
  }
}
