173 actions in the cloudfront service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to configure vended log delivery for a distribution
Grants permission to associate an alias to a CloudFront distribution
Grants permission to associate a distribution tenant with an AWS WAF web ACL
Grants permission to associate a distribution with an AWS WAF web ACL
Grants permission to copy an existing distribution and create a new web distribution
Grants permission to create an Anycast static IP list
Grants permission to add a new cache policy to CloudFront
Grants permission to create a new CloudFront origin access identity
Grants permission to create a connection function
Grants permission to create a connection group
Grants permission to add a new continuous-deployment policy to CloudFront
Grants permission to create a new web distribution
Grants permission to create a distribution tenant
Grants permission to create a new field-level encryption configuration
Grants permission to create a field-level encryption profile
Grants permission to create a CloudFront function
Grants permission to create a new invalidation batch request
Grants permission to create an invalidation for a distribution tenant
Grants permission to add a new key group to CloudFront
Grants permission to create a CloudFront KeyValueStore
Grants permission to enable additional CloudWatch metrics for the specified CloudFront distribution. The additional metrics incur an additional cost
Grants permission to create a new origin access control
Grants permission to add a new origin request policy to CloudFront
Grants permission to add a new public key to CloudFront
Grants permission to create a real-time log configuration
Grants permission to add a new response headers policy to CloudFront
Grants permission to create a new savings plan
Grants permission to create a new RTMP distribution
Grants permission to create a new RTMP distribution with tags
Grants permission to create a trust store
Grants permission to create a VPC origin
Grants permission to delete an Anycast static IP list
Grants permission to delete a cache policy
Grants permission to delete a CloudFront origin access identity
Grants permission to delete a connection function
Grants permission to delete a connection group
Grants permission to delete a continuous-deployment policy
Grants permission to delete a web distribution
Grants permission to delete a distribution tenant
Grants permission to delete a field-level encryption configuration
Grants permission to delete a field-level encryption profile
Grants permission to delete a CloudFront function
Grants permission to delete a key group
Grants permission to delete a CloudFront KeyValueStore
Grants permission to disable additional CloudWatch metrics for the specified CloudFront distribution
Grants permission to delete an origin access control
Grants permission to delete an origin request policy
Grants permission to delete a public key from CloudFront
Grants permission to delete a real-time log configuration
Grants permission to delete a resource's policy document
Grants permission to delete a response headers policy
Grants permission to delete an RTMP distribution
Grants permission to delete a trust store
Grants permission to delete a VPC origin
Grants permission to get a connection function summary
Grants permission to get a CloudFront function summary
Grants permission to get a CloudFront KeyValueStore summary
Grants permission to disassociate a distribution tenant from an AWS WAF web ACL
Grants permission to disassociate a distribution from an AWS WAF web ACL
Grants permission to get an Anycast static IP list
Grants permission to get the cache policy
Grants permission to get the cache policy configuration
Grants permission to get the information about a CloudFront origin access identity
Grants permission to get the configuration information about a Cloudfront origin access identity
Grants permission to get a connection function's code
Grants permission to get information about a connection group
Grants permission to get information about a connection group by the specified routing endpoint
Grants permission to get the continuous-deployment policy
Grants permission to get the continuous-deployment policy configuration
Grants permission to get the information about a web distribution
Grants permission to get the configuration information about a distribution
Grants permission to get information about a distribution tenant
Grants permission to get information about a distribution tenant by the associated domain
Grants permission to get the field-level encryption configuration information
Grants permission to get the field-level encryption configuration information
Grants permission to get the field-level encryption configuration information
Grants permission to get the field-level encryption profile configuration information
Grants permission to get a CloudFront function's code
Grants permission to get the information about an invalidation
Grants permission to get information about an invalidation for a distribution tenant
Grants permission to get a key group
Grants permission to get a key group configuration
Grants permission to get details about a CloudFront managed certificate
Grants permission to get information about whether additional CloudWatch metrics are enabled for the specified CloudFront distribution
Grants permission to get the origin access control
Grants permission to get the origin access control configuration
Grants permission to get the origin request policy
Grants permission to get the origin request policy configuration
Grants permission to get the public key information
Grants permission to get the public key configuration information
Grants permission to get a real-time log configuration
Grants permission to get the information about a resource's policy document
Grants permission to get the response headers policy
Grants permission to get the response headers policy configuration
Grants permission to get a savings plan
Grants permission to get the information about an RTMP distribution
Grants permission to get the configuration information about a streaming distribution
Grants permission to get information about a trust store
Grants permission to get the information about a VPC origin
Grants permission to list your Anycast static IP lists
Grants permission to list all cache policies that have been created in CloudFront for this account
Grants permission to list your CloudFront origin access identities
Grants permission to list all aliases that conflict with the given alias in CloudFront
Grants permission to list the connection functions in your AWS account
Grants permission to list the connection groups in your AWS account
Grants permission to list all continuous-deployment policies in the account
Grants permission to list the distributions associated with your AWS account
Grants permission to list the distributions in your account that are associated with the specified AnycastIpListId
Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy
Grants permission to list summaries for distributions associated with the specified connection function
Grants permission to list the distributions by the specified connection mode
Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified key group
Grants permission to list the distributions associated a Lambda function
Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified origin request policy
Grants permission to get a list of distributions that have a cache behavior that's associated with the specified real-time log configuration
Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified response headers policy
Grants permission to list summaries for distributions associated with the specified trust store
Grants permission to list IDs for distributions associated with the specified VPC origin
Grants permission to list the distributions associated with your AWS account with given AWS WAF web ACL
Grants permission to list the distribution tenants in your AWS account
Grants permission to list the distribution tenants by the customization that you specify
Grants permission to list domain conflicts for a specified domain
Grants permission to list all field-level encryption configurations that have been created in CloudFront for this account
Grants permission to list all field-level encryption profiles that have been created in CloudFront for this account
Grants permission to get a list of CloudFront functions
Grants permission to list your invalidation batches
Grants permission to list the invalidations for a distribution tenant
Grants permission to list all key groups that have been created in CloudFront for this account
Grants permission to get a list of CloudFront KeyValueStores
Grants permission to list all origin access controls in the account
Grants permission to list all origin request policies that have been created in CloudFront for this account
Grants permission to list all public keys that have been added to CloudFront for this account
Grants permission to list CloudFront rate cards for the account
Grants permission to get a list of real-time log configurations
Grants permission to list all response headers policies that have been created in CloudFront for this account
Grants permission to list savings plans in the account
Grants permission to list your RTMP distributions
Grants permission to list tags for a CloudFront resource
Grants permission to list the trust stores in your AWS account
Grants permission to list CloudFront usage
Grants permission to list VPC origins
Grants permission to publish a connection function
Grants permission to publish a CloudFront function
Grants permission to update or create a resource's policy document
Grants permission to add tags to a CloudFront resource
Grants permission to test a connection function
Grants permission to test a CloudFront function
Grants permission to remove tags from a CloudFront resource
Grants permission to update an Anycast static IP list
Grants permission to update a cache policy
Grants permission to set the configuration for a CloudFront origin access identity
Grants permission to update a connection function
Grants permission to update a connection group
Grants permission to update a continuous-deployment policy
Grants permission to update the configuration for a web distribution
Grants permission to update a distribution tenant
Grants permission to copy the configuration from a staging web distribution to its corresponding primary web distribution
Grants permission to update a domain association
Grants permission to update a field-level encryption configuration
Grants permission to update a field-level encryption profile
Grants permission to update a CloudFront function
Grants permission to update a key group
Grants permission to update a CloudFront KeyValueStore
Grants permission to update an origin access control
Grants permission to update an origin request policy
Grants permission to update public key information
Grants permission to update a real-time log configuration
Grants permission to update a response headers policy
Grants permission to update a savings plan
Grants permission to update the configuration for an RTMP distribution
Grants permission to update a trust store
Grants permission to update a VPC origin
Grants permission to verify the DNS configuration for a specified domain