66 actions in the cloudtrail service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to add one or more tags to a trail, event data store, channel or dashboard, up to a limit of 50
Grants permission to cancel a running query
Grants permission to create a channel
Grants permission to create a dashboard
Grants permission to create an event data store
Grants permission to create a service-linked channel that specifies the settings for delivery of log data to an AWS service
Grants permission to create a trail that specifies the settings for delivery of log data to an Amazon S3 bucket
Grants permission to delete a channel
Grants permission to delete a dashboard
Grants permission to delete an event data store
Grants permission to delete a resource policy from the provided resource
Grants permission to delete a service-linked channel
Grants permission to delete a trail
Grants permission to deregister an AWS Organizations member account as a delegated administrator
Grants permission to list details for the query
Grants permission to list settings for the trails associated with the current region for your account
Grants permission to disable federation of event data store data by using the AWS Glue Data Catalog
Grants permission to enable federation of event data store data by using the AWS Glue Data Catalog
Grants permission to generate a query for a specified event data store using the CloudTrail Lake query generator
Grants permission to generate a results summary for specified queries using the CloudTrail natural language generator
Grants permission to return information about a specific channel
Grants permission to list settings for the dashboard
Grants permission to list event configurations that are configured for a trail or an event data store
Grants permission to list settings for the event data store
Grants permission to get data from an event data store by using the AWS Glue Data Catalog
Grants permission to list settings for event selectors configured for a trail
Grants permission to return information about a specific import
Grants permission to list CloudTrail Insights selectors that are configured for a trail or event data store
Grants permission to fetch results of a complete query
Grants permission to get the resource policy attached to the provided resource
Grants permission to list settings for the service-linked channel
Grants permission to list settings for the trail
Grants permission to retrieve a JSON-formatted list of information about the specified trail
Grants permission to list the channels in the current account, and their source names
Grants permission to list dashboards associated with the current region for your account
Grants permission to list event data stores associated with the current region for your account
Grants permission to return a list of failures for the specified import
Grants permission to return information on all imports, or a select set of imports by ImportStatus or Destination
Grants permission to retrieve data captured by CloudTrail Insights
Grants permission to list the public keys whose private keys were used to sign trail digest files within a specified time range
Grants permission to list queries associated with an event data store
Grants permission to list service-linked channels associated with the current region for a specified account
Grants permission to list the tags for trails, event data stores, channels or dashboards in the current region
Grants permission to list trails associated with the current region for your account
Grants permission to look up and retrieve metric data for API activity events captured by CloudTrail that create, update, or delete resources in your account
Grants permission to create and update event configurations for a trail or an event data store
Grants permission to create and update event selectors for a trail
Grants permission to create and update CloudTrail Insights selectors for a trail or event data store
Grants permission to attach a resource policy to the provided resource
Grants permission to register an AWS Organizations member account as a delegated administrator
Grants permission to remove tags from a trail, event data store, channel or dashboard
Grants permission to restore an event data store
Grants permission to perform semantic search for CloudTrail Lake sample queries
Grants permission to start a refresh on the specified dashboard
Grants permission to start ingestion on an event data store
Grants permission to start an import of logged trail events from a source S3 bucket to a destination event data store
Grants permission to start the recording of AWS API calls and log file delivery for a trail
Grants permission to start a new query on a specified event data store
Grants permission to stop ingestion on an event data store
Grants permission to stop a specified import
Grants permission to stop the recording of AWS API calls and log file delivery for a trail
Grants permission to update a channel
Grants permission to update a dashboard
Grants permission to update an event data store
Grants permission to update the service-linked channel settings for delivery of log data to an AWS service
Grants permission to update the settings that specify delivery of log files