Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/carlospolop/bf-aws-permissions


https://github.com/carlospolop/bf-aws-permissions

Last synced: 11 days ago
JSON representation

Awesome Lists containing this project

README 

        
# Brute Force AWS Permissions



The script will first try to **enumerate your permissions querying the IAM service**, and then give you the options to brute force permissions.



The script `bf-aws-permissions.sh` will try to run all the `list*`, `describe*`, `get*` commands from all the aws services it can discover using the CLI and **indicate the ones that worked**.



This can have false negatives, but it's the **easiest approach to check want you can enumerate** without needing to code each possible action independently, and it won't have false positives:

- You might be able to run a command that needs another extra specific param and that will be a false negative (the tool is already testing with random params)

- You might be able to have permissions over not `list*`, `describe*`, `get*` commands and that will be a false negative



**Improvements TODO**

- *Some actions require specific ARNs from the account in 1 or more params, so generating a random ARN that fullfil the ARN regex and checking if the error says that the user doesn't have permission to that random data or that the data just doesn't exist but the user could have access could indicate access over the action*



## Quick start

```bash

# Remember to set the region in the profile

bash bf-aws-permissions.sh -p "" -r 

# BF only the 10 services most used according to GPT4

bash bf-aws-permissions.sh -p "" -r us-east-1 -s 's3|ec2|lambda|rds|sns|sqs|cloudwatch|cloudfront|iam|dynamodb'

# Skip initial checks and go straight to BF

bash bf-aws-permissions.sh -p "" -r us-east-1 -s 's3|ec2|lambda|rds|sns|sqs|cloudwatch|cloudfront|iam|dynamodb' -b



# For temp creds use:

aws configure set aws_session_token 

```



## Find even more permissions



Once you have bruteforced you permissions **check the tool https://github.com/carlospolop/aws-Perms2ManagedPolicies to try to guess more permissions you might have** if your principal is being granted permissions using AWS managed policies.



### Known "False Positives"



User/Role without any permissions



This tool detect as valid the following actions using a user/role without any permissions:



- `aws configure list`

- `aws configure list-profiles`

- `aws dynamodb describe-endpoints`

- `aws elasticbeanstalk describe-application-versions`

- `aws elasticbeanstalk describe-applications`

- `aws elasticbeanstalk describe-environments`

- `aws elasticbeanstalk describe-events`

- `aws elasticbeanstalk list-available-solution-stacks`

- `aws elasticbeanstalk list-platform-versions`

- `aws kinesis-video-archived-media get-dash-streaming-session-url`

- `aws kinesis-video-archived-media get-hls-streaming-session-url`

- `aws kinesis-video-archived-media list-fragments`

- `aws kinesis-video-signaling get-ice-server-config`

- `aws route53 get-geo-location`

- `aws route53 list-geo-locations`

- `aws sts get-caller-identity`

- `aws sts get-session-token` (only if a user, not a role)



### All actions it can detect



User/Role with Administrator permissions



This tool detect as valid the following actions using a user/role with admin permissions:



- `aws accessanalyzer list-analyzers`

- `aws accessanalyzer list-policy-generations`

- `aws account get-contact-information`

- `aws account list-regions`

- `aws acm get-account-configuration`

- `aws acm list-certificates`

- `aws acm-pca list-certificate-authorities`

- `aws amp list-workspaces`

- `aws amplify list-apps`

- `aws amplifybackend list-s3-buckets`

- `aws apigateway get-account`

- `aws apigateway get-api-keys`

- `aws apigateway get-client-certificates`

- `aws apigateway get-domain-names`

- `aws apigateway get-rest-apis`

- `aws apigateway get-sdk-types`

- `aws apigateway get-usage-plans`

- `aws apigateway get-vpc-links`

- `aws apigateway get-usage-plan-keys`

- `aws apigatewayv2 get-apis`

- `aws apigatewayv2 get-domain-names`

- `aws apigatewayv2 get-authorizers`

- `aws apigatewayv2 get-vpc-links`

- `aws appconfig list-applications`

- `aws appconfig list-deployment-strategies`

- `aws appconfig list-extension-associations`

- `aws appconfig list-extensions`

- `aws appfabric list-app-bundles`

- `aws appflow describe-connector-profiles`

- `aws appflow describe-connectors`

- `aws appflow list-connectors`

- `aws appflow list-flows`

- `aws appintegrations list-applications`

- `aws appintegrations list-data-integrations`

- `aws appintegrations list-event-integrations`

- `aws appintegrations list-data-integration-associations`

- `aws appintegrations list-event-integration-associations`

- `aws application-insights list-applications`

- `aws application-insights list-problems`

- `aws appmesh list-meshes`

- `aws apprunner list-auto-scaling-configurations`

- `aws apprunner list-connections`

- `aws apprunner list-observability-configurations`

- `aws apprunner list-services`

- `aws apprunner list-vpc-connectors`

- `aws apprunner list-vpc-ingress-connections`

- `aws appstream describe-app-block-builders`

- `aws appstream describe-app-blocks`

- `aws appstream describe-applications`

- `aws appstream describe-directory-configs`

- `aws appstream describe-fleets`

- `aws appstream describe-image-builders`

- `aws appstream describe-images`

- `aws appstream describe-stacks`

- `aws appstream describe-usage-report-subscriptions`

- `aws appstream describe-sessions`

- `aws appstream list-associated-fleets`

- `aws appstream list-associated-stacks`

- `aws appsync list-domain-names`

- `aws appsync list-graphql-apis`

- `aws arc-zonal-shift list-managed-resources`

- `aws arc-zonal-shift list-zonal-shifts`

- `aws athena list-application-dpu-sizes`

- `aws athena list-capacity-reservations`

- `aws athena list-data-catalogs`

- `aws athena list-engine-versions`

- `aws athena list-named-queries`

- `aws athena list-query-executions`

- `aws athena list-work-groups`

- `aws auditmanager get-account-status`

- `aws autoscaling describe-account-limits`

- `aws autoscaling describe-adjustment-types`

- `aws autoscaling describe-auto-scaling-groups`

- `aws autoscaling describe-auto-scaling-instances`

- `aws autoscaling describe-auto-scaling-notification-types`

- `aws autoscaling describe-launch-configurations`

- `aws autoscaling describe-lifecycle-hook-types`

- `aws autoscaling describe-metric-collection-types`

- `aws autoscaling describe-notification-configurations`

- `aws autoscaling describe-policies`

- `aws autoscaling describe-lifecycle-hooks`

- `aws autoscaling describe-scaling-activities`

- `aws autoscaling describe-scaling-process-types`

- `aws autoscaling describe-scheduled-actions`

- `aws autoscaling describe-tags`

- `aws autoscaling describe-termination-policy-types`

- `aws autoscaling-plans describe-scaling-plans`

- `aws backup describe-global-settings`

- `aws backup describe-region-settings`

- `aws backup get-supported-resource-types`

- `aws backup list-backup-jobs`

- `aws backup list-backup-plan-templates`

- `aws backup list-backup-plans`

- `aws backup list-backup-vaults`

- `aws backup list-copy-jobs`

- `aws backup list-frameworks`

- `aws backup list-legal-holds`

- `aws backup list-protected-resources`

- `aws backup list-report-jobs`

- `aws backup list-report-plans`

- `aws backup list-restore-jobs`

- `aws backup-gateway list-gateways`

- `aws backup-gateway list-hypervisors`

- `aws backup-gateway list-virtual-machines`

- `aws batch describe-compute-environments`

- `aws batch describe-job-definitions`

- `aws batch describe-job-queues`

- `aws batch list-scheduling-policies`

- `aws batch describe-jobs`

- `aws bedrock get-model-invocation-logging-configuration`

- `aws bedrock list-custom-models`

- `aws bedrock list-foundation-models`

- `aws bedrock list-model-customization-jobs`

- `aws bedrock list-provisioned-model-throughputs`

- `aws billingconductor list-account-associations`

- `aws billingconductor list-billing-group-cost-reports`

- `aws billingconductor list-billing-groups`

- `aws billingconductor list-custom-line-items`

- `aws billingconductor list-pricing-plans`

- `aws billingconductor list-pricing-rules`

- `aws ce get-anomaly-monitors`

- `aws ce get-anomaly-subscriptions`

- `aws ce list-cost-allocation-tags`

- `aws ce list-cost-category-definitions`

- `aws ce list-savings-plans-purchase-recommendation-generation`

- `aws chime get-global-settings`

- `aws chime get-phone-number-settings`

- `aws chime list-accounts`

- `aws chime list-phone-number-orders`

- `aws chime list-phone-numbers`

- `aws chime-sdk-identity list-app-instances`

- `aws chime-sdk-media-pipelines list-media-capture-pipelines`

- `aws chime-sdk-media-pipelines list-media-insights-pipeline-configurations`

- `aws chime-sdk-media-pipelines list-media-pipeline-kinesis-video-stream-pools`

- `aws chime-sdk-media-pipelines list-media-pipelines`

- `aws chime-sdk-messaging get-messaging-session-endpoint`

- `aws chime-sdk-voice get-global-settings`

- `aws chime-sdk-voice get-phone-number-settings`

- `aws chime-sdk-voice get-voice-connector-logging-configuration`

- `aws chime-sdk-voice list-available-voice-connector-regions`

- `aws chime-sdk-voice list-phone-number-orders`

- `aws chime-sdk-voice list-phone-numbers`

- `aws chime-sdk-voice list-sip-media-applications`

- `aws chime-sdk-voice list-sip-rules`

- `aws chime-sdk-voice list-voice-connector-groups`

- `aws chime-sdk-voice list-voice-connectors`

- `aws chime-sdk-voice list-voice-profile-domains`

- `aws cleanrooms list-collaborations`

- `aws cleanrooms list-configured-tables`

- `aws cleanrooms list-memberships`

- `aws cloud9 describe-environment-memberships`

- `aws cloud9 list-environments`

- `aws cloudcontrol list-resource-requests`

- `aws clouddirectory list-development-schema-arns`

- `aws clouddirectory list-directories`

- `aws clouddirectory list-managed-schema-arns`

- `aws clouddirectory list-published-schema-arns`

- `aws cloudformation describe-account-limits`

- `aws cloudformation describe-organizations-access`

- `aws cloudformation describe-stacks`

- `aws cloudformation list-exports`

- `aws cloudformation list-stack-sets`

- `aws cloudformation list-stacks`

- `aws cloudformation list-types`

- `aws cloudfront list-cache-policies`

- `aws cloudfront list-cloud-front-origin-access-identities`

- `aws cloudfront list-continuous-deployment-policies`

- `aws cloudfront list-distributions`

- `aws cloudfront list-field-level-encryption-configs`

- `aws cloudfront list-field-level-encryption-profiles`

- `aws cloudfront list-functions`

- `aws cloudfront list-key-groups`

- `aws cloudfront list-distributions-by-web-acl-id`

- `aws cloudfront list-origin-access-controls`

- `aws cloudfront list-origin-request-policies`

- `aws cloudfront list-public-keys`

- `aws cloudfront list-realtime-log-configs`

- `aws cloudfront list-response-headers-policies`

- `aws cloudfront list-streaming-distributions`

- `aws cloudhsmv2 describe-backups`

- `aws cloudhsmv2 describe-clusters`

- `aws cloudsearch describe-domains`

- `aws cloudsearch list-domain-names`

- `aws cloudtrail describe-trails`

- `aws cloudtrail list-channels`

- `aws cloudtrail list-event-data-stores`

- `aws cloudtrail list-imports`

- `aws cloudtrail list-public-keys`

- `aws cloudtrail list-trails`

- `aws cloudwatch describe-alarm-history`

- `aws cloudwatch describe-alarms`

- `aws cloudwatch describe-anomaly-detectors`

- `aws cloudwatch describe-insight-rules`

- `aws cloudwatch list-dashboards`

- `aws cloudwatch describe-alarms-for-metric`

- `aws cloudwatch list-metric-streams`

- `aws cloudwatch list-metrics`

- `aws codeartifact list-domains`

- `aws codeartifact list-repositories`

- `aws codebuild list-build-batches`

- `aws codebuild list-builds`

- `aws codebuild list-curated-environment-images`

- `aws codebuild list-projects`

- `aws codebuild list-report-groups`

- `aws codebuild list-reports`

- `aws codebuild list-shared-projects`

- `aws codebuild list-shared-report-groups`

- `aws codebuild list-source-credentials`

- `aws codecommit list-approval-rule-templates`

- `aws codecommit list-repositories`

- `aws codeguru-reviewer list-repository-associations`

- `aws codeguru-security get-account-configuration`

- `aws codeguru-security list-scans`

- `aws codeguruprofiler get-findings-report-account-summary`

- `aws codeguruprofiler list-profiling-groups`

- `aws codepipeline list-action-types`

- `aws codepipeline list-pipelines`

- `aws codepipeline list-webhooks`

- `aws codestar list-projects`

- `aws codestar list-user-profiles`

- `aws codestar-connections list-connections`

- `aws codestar-connections list-hosts`

- `aws codestar-notifications list-notification-rules`

- `aws codestar-notifications list-event-types`

- `aws codestar-notifications list-targets`

- `aws cognito-idp describe-user-pool-domain`

- `aws cognito-sync list-identity-pool-usage`

- `aws comprehend list-document-classification-jobs`

- `aws comprehend list-document-classifier-summaries`

- `aws comprehend list-document-classifiers`

- `aws comprehend list-dominant-language-detection-jobs`

- `aws comprehend list-endpoints`

- `aws comprehend list-entities-detection-jobs`

- `aws comprehend list-entity-recognizer-summaries`

- `aws comprehend list-entity-recognizers`

- `aws comprehend list-events-detection-jobs`

- `aws comprehend list-flywheels`

- `aws comprehend list-key-phrases-detection-jobs`

- `aws comprehend list-pii-entities-detection-jobs`

- `aws comprehend list-sentiment-detection-jobs`

- `aws comprehend list-targeted-sentiment-detection-jobs`

- `aws comprehend list-topics-detection-jobs`

- `aws comprehendmedical list-entities-detection-v2-jobs`

- `aws comprehendmedical list-icd10-cm-inference-jobs`

- `aws comprehendmedical list-phi-detection-jobs`

- `aws comprehendmedical list-rx-norm-inference-jobs`

- `aws comprehendmedical list-snomedct-inference-jobs`

- `aws compute-optimizer get-enrollment-status`

- `aws configservice describe-aggregation-authorizations`

- `aws configservice describe-compliance-by-config-rule`

- `aws configservice describe-config-rule-evaluation-status`

- `aws configservice describe-config-rules`

- `aws configservice describe-configuration-aggregators`

- `aws configservice describe-configuration-recorder-status`

- `aws configservice describe-configuration-recorders`

- `aws configservice describe-conformance-pack-status`

- `aws configservice describe-conformance-packs`

- `aws configservice describe-delivery-channel-status`

- `aws configservice describe-delivery-channels`

- `aws configservice describe-organization-config-rule-statuses`

- `aws configservice describe-organization-config-rules`

- `aws configservice describe-organization-conformance-pack-statuses`

- `aws configservice describe-compliance-by-resource`

- `aws configservice describe-organization-conformance-packs`

- `aws configservice describe-pending-aggregation-requests`

- `aws configservice describe-retention-configurations`

- `aws configservice describe-remediation-configurations`

- `aws configservice get-compliance-summary-by-config-rule`

- `aws configservice get-compliance-summary-by-resource-type`

- `aws configservice get-discovered-resource-counts`

- `aws configservice get-status`

- `aws configservice list-conformance-pack-compliance-scores`

- `aws configservice list-resource-evaluations`

- `aws configservice list-stored-queries`

- `aws configservice list-discovered-resources`

- `aws configure list`

- `aws configure list-profiles`

- `aws connect list-instances`

- `aws connect list-phone-numbers-v2`

- `aws connect list-default-vocabularies`

- `aws connect list-traffic-distribution-groups`

- `aws connectcampaigns list-campaigns`

- `aws connectcampaigns get-campaign-state-batch`

- `aws connectcases list-domains`

- `aws cur describe-report-definitions`

- `aws customer-profiles list-domains`

- `aws customer-profiles list-profile-object-type-templates`

- `aws customer-profiles list-account-integrations`

- `aws databrew list-datasets`

- `aws databrew list-jobs`

- `aws databrew list-projects`

- `aws databrew list-recipes`

- `aws databrew list-rulesets`

- `aws databrew list-schedules`

- `aws databrew list-recipe-versions`

- `aws dataexchange list-data-sets`

- `aws dataexchange list-event-actions`

- `aws dataexchange list-jobs`

- `aws datapipeline list-pipelines`

- `aws datasync list-agents`

- `aws datasync list-discovery-jobs`

- `aws datasync list-locations`

- `aws datasync list-storage-systems`

- `aws datasync list-task-executions`

- `aws datasync list-tasks`

- `aws datazone list-domains`

- `aws dax describe-clusters`

- `aws dax describe-default-parameters`

- `aws dax describe-events`

- `aws dax describe-parameter-groups`

- `aws dax describe-subnet-groups`

- `aws deploy list-applications`

- `aws deploy list-deployment-configs`

- `aws deploy list-deployments`

- `aws deploy list-git-hub-account-token-names`

- `aws deploy list-on-premises-instances`

- `aws detective list-graphs`

- `aws detective list-invitations`

- `aws detective list-organization-admin-accounts`

- `aws devops-guru describe-account-health`

- `aws devops-guru list-monitored-resources`

- `aws devops-guru list-notification-channels`

- `aws devops-guru list-recommendations`

- `aws directconnect describe-connections`

- `aws directconnect describe-customer-metadata`

- `aws directconnect describe-direct-connect-gateway-association-proposals`

- `aws directconnect describe-direct-connect-gateways`

- `aws directconnect describe-lags`

- `aws directconnect describe-locations`

- `aws directconnect describe-virtual-gateways`

- `aws directconnect describe-virtual-interfaces`

- `aws directconnect list-virtual-interface-test-history`

- `aws discovery describe-agents`

- `aws discovery describe-continuous-exports`

- `aws discovery describe-export-tasks`

- `aws discovery describe-import-tasks`

- `aws discovery describe-tags`

- `aws discovery get-discovery-summary`

- `aws dlm get-lifecycle-policies`

- `aws discovery list-server-neighbors`

- `aws dms describe-account-attributes`

- `aws dms describe-applicable-individual-assessments`

- `aws dms describe-certificates`

- `aws dms describe-connections`

- `aws dms describe-data-providers`

- `aws dms describe-endpoint-types`

- `aws dms describe-endpoints`

- `aws dms describe-engine-versions`

- `aws dms describe-event-categories`

- `aws dms describe-event-subscriptions`

- `aws dms describe-events`

- `aws dms describe-fleet-advisor-collectors`

- `aws dms describe-fleet-advisor-databases`

- `aws dms describe-fleet-advisor-lsa-analysis`

- `aws dms describe-fleet-advisor-schema-object-summary`

- `aws dms describe-fleet-advisor-schemas`

- `aws dms describe-instance-profiles`

- `aws dms describe-migration-projects`

- `aws dms describe-pending-maintenance-actions`

- `aws dms describe-recommendation-limitations`

- `aws dms describe-recommendations`

- `aws dms describe-replication-configs`

- `aws dms describe-orderable-replication-instances`

- `aws dms describe-replication-instances`

- `aws dms describe-replication-subnet-groups`

- `aws dms describe-replication-task-assessment-runs`

- `aws dms describe-replication-task-individual-assessments`

- `aws dms describe-replication-tasks`

- `aws dms describe-replications`

- `aws docdb describe-certificates`

- `aws docdb describe-db-cluster-parameter-groups`

- `aws docdb describe-db-cluster-snapshots`

- `aws docdb describe-db-clusters`

- `aws docdb describe-db-instances`

- `aws docdb describe-db-subnet-groups`

- `aws docdb describe-event-categories`

- `aws docdb describe-event-subscriptions`

- `aws docdb describe-events`

- `aws docdb describe-global-clusters`

- `aws docdb describe-pending-maintenance-actions`

- `aws docdb-elastic list-cluster-snapshots`

- `aws docdb-elastic list-clusters`

- `aws docdb describe-db-engine-versions`

- `aws ds describe-directories`

- `aws ds describe-event-topics`

- `aws ds describe-snapshots`

- `aws ds describe-trusts`

- `aws ds get-directory-limits`

- `aws ds list-log-subscriptions`

- `aws dynamodb describe-endpoints`

- `aws dynamodb describe-limits`

- `aws dynamodb list-backups`

- `aws dynamodb list-contributor-insights`

- `aws dynamodb list-exports`

- `aws dynamodb list-global-tables`

- `aws dynamodb list-imports`

- `aws dynamodb list-tables`

- `aws dynamodbstreams list-streams`

- `aws ec2 describe-account-attributes`

- `aws ec2 describe-address-transfers`

- `aws ec2 describe-addresses`

- `aws ec2 describe-addresses-attribute`

- `aws ec2 describe-aggregate-id-format`

- `aws ec2 describe-availability-zones`

- `aws ec2 describe-aws-network-performance-metric-subscriptions`

- `aws ec2 describe-bundle-tasks`

- `aws ec2 describe-capacity-reservation-fleets`

- `aws ec2 describe-capacity-reservations`

- `aws ec2 describe-carrier-gateways`

- `aws ec2 describe-classic-link-instances`

- `aws ec2 describe-client-vpn-endpoints`

- `aws ec2 describe-coip-pools`

- `aws ec2 describe-conversion-tasks`

- `aws ec2 describe-customer-gateways`

- `aws ec2 describe-dhcp-options`

- `aws ec2 describe-egress-only-internet-gateways`

- `aws ec2 describe-export-image-tasks`

- `aws ec2 describe-export-tasks`

- `aws ec2 describe-fast-launch-images`

- `aws ec2 describe-fast-snapshot-restores`

- `aws ec2 describe-fleets`

- `aws ec2 describe-flow-logs`

- `aws ec2 describe-host-reservations`

- `aws ec2 describe-hosts`

- `aws ec2 describe-iam-instance-profile-associations`

- `aws ec2 describe-id-format`

- `aws ec2 describe-host-reservation-offerings`

- `aws ec2 describe-import-image-tasks`

- `aws ec2 describe-import-snapshot-tasks`

- `aws ec2 describe-instance-connect-endpoints`

- `aws ec2 describe-instance-credit-specifications`

- `aws ec2 describe-instance-event-notification-attributes`

- `aws ec2 describe-instance-event-windows`

- `aws ec2 describe-instance-status`

- `aws ec2 describe-instances`

- `aws ec2 describe-internet-gateways`

- `aws ec2 describe-ipam-pools`

- `aws ec2 describe-instance-type-offerings`

- `aws ec2 describe-ipam-resource-discoveries`

- `aws ec2 describe-ipam-resource-discovery-associations`

- `aws ec2 describe-ipam-scopes`

- `aws ec2 describe-ipams`

- `aws ec2 describe-ipv6-pools`

- `aws ec2 describe-key-pairs`

- `aws ec2 describe-launch-templates`

- `aws ec2 describe-local-gateway-route-table-virtual-interface-group-associations`

- `aws ec2 describe-local-gateway-route-table-vpc-associations`

- `aws ec2 describe-local-gateway-route-tables`

- `aws ec2 describe-local-gateway-virtual-interface-groups`

- `aws ec2 describe-local-gateway-virtual-interfaces`

- `aws ec2 describe-local-gateways`

- `aws ec2 describe-managed-prefix-lists`

- `aws ec2 describe-moving-addresses`

- `aws ec2 describe-nat-gateways`

- `aws ec2 describe-network-acls`

- `aws ec2 describe-network-insights-access-scope-analyses`

- `aws ec2 describe-network-insights-access-scopes`

- `aws ec2 describe-network-insights-analyses`

- `aws ec2 describe-network-insights-paths`

- `aws ec2 describe-network-interface-permissions`

- `aws ec2 describe-network-interfaces`

- `aws ec2 describe-placement-groups`

- `aws ec2 describe-prefix-lists`

- `aws ec2 describe-principal-id-format`

- `aws ec2 describe-public-ipv4-pools`

- `aws ec2 describe-fpga-images`

- `aws ec2 describe-regions`

- `aws ec2 describe-reserved-instances`

- `aws ec2 describe-replace-root-volume-tasks`

- `aws ec2 describe-reserved-instances-modifications`

- `aws ec2 describe-route-tables`

- `aws ec2 describe-instance-types`

- `aws ec2 describe-scheduled-instances`

- `aws ec2 describe-security-groups`

- `aws ec2 describe-security-group-rules`

- `aws ec2 describe-snapshot-tier-status`

- `aws ec2 describe-spot-fleet-requests`

- `aws ec2 describe-spot-instance-requests`

- `aws ec2 describe-store-image-tasks`

- `aws ec2 describe-subnets`

- `aws ec2 describe-tags`

- `aws ec2 describe-traffic-mirror-filters`

- `aws ec2 describe-traffic-mirror-sessions`

- `aws ec2 describe-traffic-mirror-targets`

- `aws ec2 describe-transit-gateway-attachments`

- `aws ec2 describe-transit-gateway-connect-peers`

- `aws ec2 describe-transit-gateway-connects`

- `aws ec2 describe-transit-gateway-multicast-domains`

- `aws ec2 describe-transit-gateway-peering-attachments`

- `aws ec2 describe-transit-gateway-policy-tables`

- `aws ec2 describe-transit-gateway-route-table-announcements`

- `aws ec2 describe-transit-gateway-route-tables`

- `aws ec2 describe-transit-gateway-vpc-attachments`

- `aws ec2 describe-transit-gateways`

- `aws ec2 describe-verified-access-endpoints`

- `aws ec2 describe-verified-access-groups`

- `aws ec2 describe-verified-access-instance-logging-configurations`

- `aws ec2 describe-verified-access-instances`

- `aws ec2 describe-verified-access-trust-providers`

- `aws ec2 describe-volume-status`

- `aws ec2 describe-volumes`

- `aws ec2 describe-volumes-modifications`

- `aws ec2 describe-vpc-classic-link`

- `aws ec2 describe-vpc-classic-link-dns-support`

- `aws ec2 describe-vpc-endpoint-connection-notifications`

- `aws ec2 describe-vpc-endpoint-connections`

- `aws ec2 describe-vpc-endpoint-service-configurations`

- `aws ec2 describe-vpc-endpoints`

- `aws ec2 describe-vpc-peering-connections`

- `aws ec2 describe-vpcs`

- `aws ec2 describe-vpn-connections`

- `aws ec2 describe-vpn-gateways`

- `aws ec2 get-ebs-default-kms-key-id`

- `aws ec2 get-ebs-encryption-by-default`

- `aws ec2 get-image-block-public-access-state`

- `aws ec2 describe-vpc-endpoint-services`

- `aws ec2 get-serial-console-access-status`

- `aws ec2 get-vpn-connection-device-types`

- `aws ec2 list-images-in-recycle-bin`

- `aws ec2 list-snapshots-in-recycle-bin`

- `aws ecr describe-pull-through-cache-rules`

- `aws ecr describe-registry`

- `aws ecr describe-repositories`

- `aws ecr get-authorization-token`

- `aws ecr get-login-password`

- `aws ecr get-registry-scanning-configuration`

- `aws ecr-public describe-registries`

- `aws ecr-public describe-repositories`

- `aws ecr-public get-authorization-token`

- `aws ecr-public get-login-password`

- `aws ecr-public get-registry-catalog-data`

- `aws ecs describe-capacity-providers`

- `aws ecs describe-clusters`

- `aws ecs list-account-settings`

- `aws ecs list-clusters`

- `aws ecs list-task-definition-families`

- `aws ecs list-task-definitions`

- `aws efs describe-access-points`

- `aws efs describe-account-preferences`

- `aws efs describe-file-systems`

- `aws eks describe-addon-versions`

- `aws eks list-clusters`

- `aws elastic-inference describe-accelerator-types`

- `aws elastic-inference describe-accelerators`

- `aws elasticache describe-cache-clusters`

- `aws elasticache describe-cache-engine-versions`

- `aws elasticache describe-cache-parameter-groups`

- `aws elasticache describe-cache-subnet-groups`

- `aws elasticache describe-events`

- `aws elasticache describe-global-replication-groups`

- `aws elasticache describe-replication-groups`

- `aws elasticache describe-reserved-cache-nodes`

- `aws elasticache describe-service-updates`

- `aws elasticache describe-snapshots`

- `aws elasticache describe-update-actions`

- `aws elasticache describe-user-groups`

- `aws elasticache describe-users`

- `aws elasticbeanstalk describe-account-attributes`

- `aws elasticbeanstalk describe-application-versions`

- `aws elasticbeanstalk describe-applications`

- `aws elasticbeanstalk describe-environments`

- `aws elasticbeanstalk describe-events`

- `aws elasticache describe-reserved-cache-nodes-offerings`

- `aws elasticbeanstalk list-available-solution-stacks`

- `aws elasticbeanstalk list-platform-branches`

- `aws elasticbeanstalk list-platform-versions`

- `aws elastictranscoder list-pipelines`

- `aws elastictranscoder list-presets`

- `aws elb describe-account-limits`

- `aws elb describe-load-balancer-policy-types`

- `aws elb describe-load-balancers`

- `aws elb describe-load-balancer-policies`

- `aws elbv2 describe-account-limits`

- `aws elbv2 describe-load-balancers`

- `aws elbv2 describe-ssl-policies`

- `aws elbv2 describe-target-groups`

- `aws emr get-block-public-access-configuration`

- `aws emr list-clusters`

- `aws emr list-notebook-executions`

- `aws emr list-release-labels`

- `aws emr list-security-configurations`

- `aws emr list-studio-session-mappings`

- `aws emr list-studios`

- `aws emr-containers list-job-templates`

- `aws emr-containers list-virtual-clusters`

- `aws emr-serverless list-applications`

- `aws entityresolution list-id-mapping-workflows`

- `aws entityresolution list-matching-workflows`

- `aws entityresolution list-provider-services`

- `aws entityresolution list-schema-mappings`

- `aws es describe-inbound-cross-cluster-search-connections`

- `aws es describe-outbound-cross-cluster-search-connections`

- `aws es describe-packages`

- `aws es describe-reserved-elasticsearch-instances`

- `aws es get-compatible-elasticsearch-versions`

- `aws es list-domain-names`

- `aws es describe-reserved-elasticsearch-instance-offerings`

- `aws es list-elasticsearch-versions`

- `aws es list-vpc-endpoints`

- `aws events describe-event-bus`

- `aws events list-api-destinations`

- `aws events list-archives`

- `aws events list-connections`

- `aws events list-endpoints`

- `aws events list-event-buses`

- `aws events list-event-sources`

- `aws events list-replays`

- `aws events list-rules`

- `aws evidently list-projects`

- `aws evidently list-segments`

- `aws evidently list-experiments`

- `aws evidently list-features`

- `aws evidently list-launches`

- `aws finspace list-environments`

- `aws finspace list-kx-environments`

- `aws firehose list-delivery-streams`

- `aws fis list-actions`

- `aws fis list-experiment-templates`

- `aws fis list-experiments`

- `aws fis list-target-resource-types`

- `aws forecast list-dataset-groups`

- `aws forecast list-dataset-import-jobs`

- `aws forecast list-datasets`

- `aws forecast list-explainabilities`

- `aws forecast list-explainability-exports`

- `aws forecast list-forecast-export-jobs`

- `aws forecast list-forecasts`

- `aws forecast list-monitors`

- `aws forecast list-predictor-backtest-export-jobs`

- `aws forecast list-predictors`

- `aws forecast list-what-if-analyses`

- `aws forecast list-what-if-forecast-exports`

- `aws forecast list-what-if-forecasts`

- `aws frauddetector describe-model-versions`

- `aws frauddetector get-batch-import-jobs`

- `aws frauddetector get-batch-prediction-jobs`

- `aws frauddetector get-detectors`

- `aws frauddetector get-entity-types`

- `aws frauddetector get-event-types`

- `aws frauddetector get-external-models`

- `aws frauddetector get-kms-encryption-key`

- `aws frauddetector get-labels`

- `aws frauddetector get-lists-metadata`

- `aws frauddetector get-models`

- `aws frauddetector get-outcomes`

- `aws frauddetector get-variables`

- `aws frauddetector list-event-predictions`

- `aws fsx describe-backups`

- `aws fsx describe-data-repository-associations`

- `aws fsx describe-data-repository-tasks`

- `aws fsx describe-file-caches`

- `aws fsx describe-file-systems`

- `aws fsx describe-snapshots`

- `aws fsx describe-storage-virtual-machines`

- `aws fsx describe-volumes`

- `aws gamelift describe-ec2-instance-limits`

- `aws gamelift describe-fleet-attributes`

- `aws gamelift describe-fleet-capacity`

- `aws gamelift describe-fleet-utilization`

- `aws gamelift describe-game-session-queues`

- `aws gamelift describe-matchmaking-configurations`

- `aws gamelift describe-matchmaking-rule-sets`

- `aws gamelift describe-vpc-peering-authorizations`

- `aws gamelift describe-vpc-peering-connections`

- `aws gamelift list-aliases`

- `aws gamelift list-builds`

- `aws gamelift list-fleets`

- `aws gamelift list-game-server-groups`

- `aws gamelift list-locations`

- `aws gamelift list-scripts`

- `aws glue get-catalog-import-status`

- `aws glue get-classifiers`

- `aws glue get-connections`

- `aws glue get-crawler-metrics`

- `aws glue get-crawlers`

- `aws glue get-data-catalog-encryption-settings`

- `aws glue get-databases`

- `aws glue get-dev-endpoints`

- `aws glue get-jobs`

- `aws glue get-ml-transforms`

- `aws glue get-resource-policies`

- `aws glue get-security-configurations`

- `aws glue get-triggers`

- `aws glue list-blueprints`

- `aws glue list-crawlers`

- `aws glue list-custom-entity-types`

- `aws glue get-user-defined-functions`

- `aws glue list-data-quality-results`

- `aws glue list-data-quality-rule-recommendation-runs`

- `aws glue list-data-quality-ruleset-evaluation-runs`

- `aws glue list-data-quality-rulesets`

- `aws glue list-dev-endpoints`

- `aws glue list-jobs`

- `aws glue list-ml-transforms`

- `aws glue list-registries`

- `aws glue list-schemas`

- `aws glue list-sessions`

- `aws glue list-triggers`

- `aws glue list-workflows`

- `aws grafana list-versions`

- `aws grafana list-workspaces`

- `aws greengrass get-group-certificate-configuration`

- `aws greengrass list-bulk-deployments`

- `aws greengrass list-connector-definitions`

- `aws greengrass list-core-definitions`

- `aws greengrass list-bulk-deployment-detailed-reports`

- `aws greengrass list-device-definitions`

- `aws greengrass list-function-definitions`

- `aws greengrass list-deployments`

- `aws greengrass list-groups`

- `aws greengrass list-logger-definitions`

- `aws greengrass list-resource-definitions`

- `aws greengrass list-subscription-definitions`

- `aws greengrassv2 list-components`

- `aws greengrassv2 list-core-devices`

- `aws greengrassv2 list-deployments`

- `aws greengrassv2 list-client-devices-associated-with-core-device`

- `aws greengrassv2 list-effective-deployments`

- `aws greengrassv2 list-installed-components`

- `aws groundstation list-configs`

- `aws groundstation list-dataflow-endpoint-groups`

- `aws groundstation list-ground-stations`

- `aws groundstation list-mission-profiles`

- `aws groundstation list-satellites`

- `aws guardduty get-invitations-count`

- `aws guardduty list-detectors`

- `aws guardduty list-invitations`

- `aws guardduty list-organization-admin-accounts`

- `aws healthlake list-fhir-datastores`

- `aws iam get-account-summary`

- `aws iam get-user`

- `aws iam list-access-keys`

- `aws iam list-account-aliases`

- `aws iam get-account-authorization-details`

- `aws iam list-groups`

- `aws iam list-instance-profiles`

- `aws iam list-mfa-devices`

- `aws iam list-open-id-connect-providers`

- `aws iam list-roles`

- `aws iam list-saml-providers`

- `aws iam list-policies`

- `aws iam list-server-certificates`

- `aws iam list-service-specific-credentials`

- `aws iam list-signing-certificates`

- `aws iam list-ssh-public-keys`

- `aws iam list-users`

- `aws iam list-virtual-mfa-devices`

- `aws imagebuilder list-components`

- `aws imagebuilder list-container-recipes`

- `aws imagebuilder list-distribution-configurations`

- `aws imagebuilder list-image-pipelines`

- `aws imagebuilder list-image-recipes`

- `aws imagebuilder list-image-scan-finding-aggregations`

- `aws imagebuilder list-image-scan-findings`

- `aws imagebuilder list-images`

- `aws imagebuilder list-infrastructure-configurations`

- `aws inspector describe-cross-account-access-role`

- `aws inspector describe-assessment-runs`

- `aws inspector describe-assessment-targets`

- `aws inspector describe-assessment-templates`

- `aws inspector describe-exclusions`

- `aws inspector describe-findings`

- `aws inspector describe-resource-groups`

- `aws inspector list-assessment-runs`

- `aws inspector describe-rules-packages`

- `aws inspector list-assessment-targets`

- `aws inspector list-assessment-templates`

- `aws inspector list-event-subscriptions`

- `aws inspector list-rules-packages`

- `aws inspector list-findings`

- `aws inspector2 get-ec2-deep-inspection-configuration`

- `aws inspector2 list-account-permissions`

- `aws inspector2 list-coverage`

- `aws inspector2 list-coverage-statistics`

- `aws inspector2 list-delegated-admin-accounts`

- `aws inspector2 list-filters`

- `aws inspector2 list-findings`

- `aws inspector2 list-members`

- `aws inspector2 list-usage-totals`

- `aws internetmonitor list-monitors`

- `aws internetmonitor list-health-events`

- `aws iot describe-account-audit-configuration`

- `aws iot describe-endpoint`

- `aws iot describe-event-configurations`

- `aws iot get-behavior-model-training-summaries`

- `aws iot get-indexing-configuration`

- `aws iot get-package-configuration`

- `aws iot get-registration-code`

- `aws iot list-active-violations`

- `aws iot list-audit-suppressions`

- `aws iot list-authorizers`

- `aws iot list-billing-groups`

- `aws iot list-ca-certificates`

- `aws iot list-certificates`

- `aws iot list-custom-metrics`

- `aws iot list-dimensions`

- `aws iot list-domain-configurations`

- `aws iot list-fleet-metrics`

- `aws iot list-indices`

- `aws iot list-job-templates`

- `aws iot list-jobs`

- `aws iot list-managed-job-templates`

- `aws iot list-mitigation-actions`

- `aws iot list-job-executions-for-thing`

- `aws iot list-ota-updates`

- `aws iot list-outgoing-certificates`

- `aws iot list-packages`

- `aws iot list-policies`

- `aws iot list-package-versions`

- `aws iot list-provisioning-templates`

- `aws iot list-role-aliases`

- `aws iot list-scheduled-audits`

- `aws iot list-security-profiles`

- `aws iot list-streams`

- `aws iot list-thing-groups`

- `aws iot list-thing-registration-tasks`

- `aws iot list-thing-types`

- `aws iot list-things`

- `aws iot list-topic-rule-destinations`

- `aws iot list-topic-rules`

- `aws iot-data list-retained-messages`

- `aws iot-data list-named-shadows-for-thing`

- `aws iotanalytics list-channels`

- `aws iotanalytics list-datasets`

- `aws iotanalytics list-datastores`

- `aws iotanalytics list-pipelines`

- `aws iotdeviceadvisor get-endpoint`

- `aws iotdeviceadvisor list-suite-definitions`

- `aws iotdeviceadvisor list-suite-runs`

- `aws iotevents list-alarm-models`

- `aws iotevents list-detector-models`

- `aws iotevents list-inputs`

- `aws iotfleethub list-applications`

- `aws iotfleetwise get-encryption-configuration`

- `aws iotfleetwise get-logging-options`

- `aws iotfleetwise list-campaigns`

- `aws iotfleetwise list-decoder-manifests`

- `aws iotfleetwise list-fleets`

- `aws iotfleetwise list-model-manifests`

- `aws iotfleetwise list-signal-catalogs`

- `aws iotfleetwise list-vehicles`

- `aws iotsecuretunneling list-tunnels`

- `aws iotsitewise describe-default-encryption-configuration`

- `aws iotsitewise describe-logging-options`

- `aws iotsitewise describe-storage-configuration`

- `aws iotsitewise list-asset-models`

- `aws iotsitewise list-bulk-import-jobs`

- `aws iotsitewise list-gateways`

- `aws iotsitewise list-portals`

- `aws iotsitewise list-time-series`

- `aws iottwinmaker get-pricing-plan`

- `aws iottwinmaker list-workspaces`

- `aws iottwinmaker list-sync-jobs`

- `aws iotwireless get-event-configuration-by-resource-types`

- `aws iotwireless get-log-levels-by-resource-types`

- `aws iotwireless get-service-endpoint`

- `aws iotwireless list-destinations`

- `aws iotwireless list-device-profiles`

- `aws iotwireless list-fuota-tasks`

- `aws iotwireless list-multicast-groups`

- `aws iotwireless list-network-analyzer-configurations`

- `aws iotwireless list-partner-accounts`

- `aws iotwireless list-service-profiles`

- `aws iotwireless list-wireless-device-import-tasks`

- `aws iotwireless list-wireless-devices`

- `aws iotwireless list-wireless-gateway-task-definitions`

- `aws iotwireless list-wireless-gateways`

- `aws ivs list-channels`

- `aws ivs list-playback-key-pairs`

- `aws ivs list-recording-configurations`

- `aws ivs list-streams`

- `aws ivs-realtime list-stages`

- `aws ivschat list-logging-configurations`

- `aws ivschat list-rooms`

- `aws kafka get-compatible-kafka-versions`

- `aws kafka list-clusters`

- `aws kafka list-clusters-v2`

- `aws kafka list-configurations`

- `aws kafka list-kafka-versions`

- `aws kafka list-replicators`

- `aws kafka list-vpc-connections`

- `aws kafkaconnect list-connectors`

- `aws kafkaconnect list-custom-plugins`

- `aws kafkaconnect list-worker-configurations`

- `aws kendra list-indices`

- `aws kendra-ranking list-rescore-execution-plans`

- `aws keyspaces list-keyspaces`

- `aws keyspaces list-tables`

- `aws kinesis describe-limits`

- `aws kinesis list-streams`

- `aws kinesis-video-archived-media get-dash-streaming-session-url`

- `aws kinesis-video-archived-media get-hls-streaming-session-url`

- `aws kinesis-video-archived-media list-fragments`

- `aws kinesis-video-signaling get-ice-server-config`

- `aws kinesisanalytics list-applications`

- `aws kinesisanalyticsv2 list-applications`

- `aws kinesisvideo list-signaling-channels`

- `aws kinesisvideo list-streams`

- `aws kms describe-custom-key-stores`

- `aws kms list-aliases`

- `aws kms list-keys`

- `aws lakeformation get-data-lake-settings`

- `aws lakeformation list-data-cells-filter`

- `aws lakeformation list-lf-tags`

- `aws lakeformation list-permissions`

- `aws lakeformation list-resources`

- `aws lakeformation list-transactions`

- `aws lakeformation list-table-storage-optimizers`

- `aws lambda get-account-settings`

- `aws lambda list-code-signing-configs`

- `aws lambda list-event-source-mappings`

- `aws lambda list-functions`

- `aws lambda list-layers`

- `aws lambda list-layer-versions`

- `aws lex-models get-bots`

- `aws lex-models get-bot-aliases`

- `aws lex-models get-builtin-intents`

- `aws lex-models get-builtin-slot-types`

- `aws lex-models get-bot-versions`

- `aws lex-models get-intents`

- `aws lex-models get-bot-channel-associations`

- `aws lex-models get-migrations`

- `aws lex-models get-slot-types`

- `aws lex-models get-intent-versions`

- `aws lex-models get-slot-type-versions`

- `aws lexv2-models list-bots`

- `aws lexv2-models list-exports`

- `aws lexv2-models list-imports`

- `aws lexv2-models list-test-executions`

- `aws lexv2-models list-test-sets`

- `aws license-manager-linux-subscriptions get-service-settings`

- `aws lightsail get-active-names`

- `aws lightsail get-alarms`

- `aws lightsail get-blueprints`

- `aws lightsail get-bucket-bundles`

- `aws lightsail get-buckets`

- `aws lightsail get-bundles`

- `aws lightsail get-certificates`

- `aws lightsail get-cloud-formation-stack-records`

- `aws lightsail get-contact-methods`

- `aws lightsail get-container-api-metadata`

- `aws lightsail get-container-service-powers`

- `aws lightsail get-container-services`

- `aws lightsail get-disk-snapshots`

- `aws lightsail get-disks`

- `aws lightsail get-distribution-bundles`

- `aws lightsail get-distributions`

- `aws lightsail get-domains`

- `aws lightsail get-export-snapshot-records`

- `aws lightsail get-instance-snapshots`

- `aws lightsail get-instances`

- `aws lightsail get-key-pairs`

- `aws lightsail get-load-balancer-tls-policies`

- `aws lightsail get-load-balancers`

- `aws lightsail get-operations`

- `aws lightsail get-regions`

- `aws lightsail get-relational-database-bundles`

- `aws lightsail get-relational-database-blueprints`

- `aws lightsail get-relational-database-snapshots`

- `aws lightsail get-relational-databases`

- `aws lightsail get-static-ips`

- `aws location list-geofence-collections`

- `aws location list-keys`

- `aws location list-maps`

- `aws location list-place-indexes`

- `aws location list-route-calculators`

- `aws location list-trackers`

- `aws logs describe-destinations`

- `aws logs describe-export-tasks`

- `aws logs describe-log-groups`

- `aws logs describe-metric-filters`

- `aws logs describe-queries`

- `aws logs describe-query-definitions`

- `aws logs describe-resource-policies`

- `aws lookoutequipment list-data-ingestion-jobs`

- `aws lookoutequipment list-datasets`

- `aws lookoutequipment list-inference-schedulers`

- `aws lookoutequipment list-label-groups`

- `aws lookoutequipment list-models`

- `aws lookoutequipment list-retraining-schedulers`

- `aws lookoutequipment list-inference-executions`

- `aws lookoutequipment list-labels`

- `aws lookoutequipment list-model-versions`

- `aws lookoutmetrics list-alerts`

- `aws lookoutmetrics list-anomaly-detectors`

- `aws lookoutmetrics list-metric-sets`

- `aws lookoutvision list-projects`

- `aws m2 get-signed-bluinsights-url`

- `aws m2 list-applications`

- `aws m2 list-engine-versions`

- `aws m2 list-environments`

- `aws macie2 get-invitations-count`

- `aws macie2 list-invitations`

- `aws macie2 list-organization-admin-accounts`

- `aws managedblockchain list-accessors`

- `aws managedblockchain list-invitations`

- `aws managedblockchain list-networks`

- `aws marketplace-entitlement get-entitlements`

- `aws mediaconnect list-bridges`

- `aws mediaconnect list-entitlements`

- `aws mediaconnect list-flows`

- `aws mediaconnect list-gateway-instances`

- `aws mediaconnect list-gateways`

- `aws mediaconnect list-offerings`

- `aws mediaconnect list-reservations`

- `aws mediaconvert describe-endpoints`

- `aws mediaconvert get-policy`

- `aws mediaconvert list-job-templates`

- `aws mediaconvert list-jobs`

- `aws mediaconvert list-presets`

- `aws mediaconvert list-queues`

- `aws medialive describe-account-configuration`

- `aws medialive list-channels`

- `aws medialive list-input-devices`

- `aws medialive list-input-security-groups`

- `aws medialive list-inputs`

- `aws medialive list-multiplexes`

- `aws medialive list-reservations`

- `aws medialive list-multiplex-programs`

- `aws medialive list-offerings`

- `aws mediapackage list-channels`

- `aws mediapackage list-harvest-jobs`

- `aws mediapackage list-origin-endpoints`

- `aws mediapackage-vod list-assets`

- `aws mediapackage-vod list-packaging-configurations`

- `aws mediapackage-vod list-packaging-groups`

- `aws mediapackagev2 list-channel-groups`

- `aws mediastore list-containers`

- `aws mediatailor list-channels`

- `aws mediatailor list-playback-configurations`

- `aws mediatailor list-source-locations`

- `aws medical-imaging list-datastores`

- `aws memorydb describe-acls`

- `aws memorydb describe-clusters`

- `aws memorydb describe-engine-versions`

- `aws memorydb describe-events`

- `aws memorydb describe-parameter-groups`

- `aws memorydb describe-reserved-nodes`

- `aws memorydb describe-service-updates`

- `aws memorydb describe-reserved-nodes-offerings`

- `aws memorydb describe-snapshots`

- `aws memorydb describe-subnet-groups`

- `aws memorydb describe-users`

- `aws mgh list-application-states`

- `aws mgh list-migration-tasks`

- `aws mgh list-progress-update-streams`

- `aws migration-hub-refactor-spaces list-environments`

- `aws migrationhub-config describe-home-region-controls`

- `aws migrationhub-config get-home-region`

- `aws migrationhuborchestrator list-plugins`

- `aws migrationhuborchestrator list-templates`

- `aws migrationhuborchestrator list-workflows`

- `aws migrationhubstrategy get-portfolio-preferences`

- `aws migrationhubstrategy get-portfolio-summary`

- `aws migrationhubstrategy list-application-components`

- `aws migrationhubstrategy list-collectors`

- `aws migrationhubstrategy list-import-file-task`

- `aws migrationhubstrategy list-servers`

- `aws mq describe-broker-engine-types`

- `aws mq describe-broker-instance-options`

- `aws mq list-brokers`

- `aws mq list-configurations`

- `aws :: (ERROR/3) Anonymous hyperlink mismatch: 2 references but 0 targets.ia get-media-for-fra`

- `aws See "backrefs" attribute for IDs.`

- `aws mwaa list-environments`

- `aws neptune describe-db-cluster-endpoints`

- `aws neptune describe-db-cluster-parameter-groups`

- `aws neptune describe-db-cluster-snapshots`

- `aws neptune describe-db-clusters`

- `aws neptune describe-db-instances`

- `aws neptune describe-db-parameter-groups`

- `aws neptune describe-db-subnet-groups`

- `aws neptune describe-event-categories`

- `aws neptune describe-event-subscriptions`

- `aws neptune describe-events`

- `aws neptune describe-global-clusters`

- `aws neptune describe-pending-maintenance-actions`

- `aws neptune describe-db-engine-versions`

- `aws network-firewall list-firewall-policies`

- `aws network-firewall list-firewalls`

- `aws network-firewall list-rule-groups`

- `aws network-firewall list-tls-inspection-configurations`

- `aws networkmanager describe-global-networks`

- `aws networkmanager list-attachments`

- `aws networkmanager list-connect-peers`

- `aws networkmanager list-core-networks`

- `aws networkmanager list-organization-service-access-status`

- `aws networkmanager list-peerings`

- `aws nimble list-studios`

- `aws oam list-links`

- `aws oam list-sinks`

- `aws omics list-annotation-import-jobs`

- `aws omics list-annotation-stores`

- `aws omics list-reference-stores`

- `aws omics list-run-groups`

- `aws omics list-runs`

- `aws omics list-sequence-stores`

- `aws omics list-workflows`

- `aws omics list-variant-stores`

- `aws opensearch describe-inbound-connections`

- `aws opensearch describe-outbound-connections`

- `aws opensearch describe-packages`

- `aws opensearch describe-reserved-instances`

- `aws opensearch describe-reserved-instance-offerings`

- `aws opensearch get-compatible-versions`

- `aws opensearch list-domain-names`

- `aws opensearch list-versions`

- `aws opensearch list-vpc-endpoints`

- `aws opensearchserverless get-account-settings`

- `aws opensearchserverless get-policies-stats`

- `aws opensearchserverless list-collections`

- `aws opensearchserverless list-vpc-endpoints`

- `aws organizations describe-organization`

- `aws organizations list-accounts`

- `aws organizations list-aws-service-access-for-organization`

- `aws organizations list-create-account-status`

- `aws organizations list-delegated-administrators`

- `aws organizations list-handshakes-for-account`

- `aws organizations list-handshakes-for-organization`

- `aws organizations list-roots`

- `aws osis list-pipeline-blueprints`

- `aws osis list-pipelines`

- `aws outposts list-catalog-items`

- `aws outposts list-orders`

- `aws outposts list-outposts`

- `aws outposts list-sites`

- `aws panorama list-application-instances`

- `aws panorama list-devices`

- `aws panorama list-devices-jobs`

- `aws panorama list-node-from-template-jobs`

- `aws panorama list-nodes`

- `aws panorama list-package-import-jobs`

- `aws panorama list-packages`

- `aws payment-cryptography list-aliases`

- `aws payment-cryptography list-keys`

- `aws pca-connector-ad list-connectors`

- `aws pca-connector-ad list-directory-registrations`

- `aws personalize list-batch-inference-jobs`

- `aws personalize list-batch-segment-jobs`

- `aws personalize list-campaigns`

- `aws personalize list-dataset-export-jobs`

- `aws personalize list-dataset-groups`

- `aws personalize list-dataset-import-jobs`

- `aws personalize list-datasets`

- `aws personalize list-event-trackers`

- `aws personalize list-filters`

- `aws personalize list-metric-attributions`

- `aws personalize list-recipes`

- `aws personalize list-recommenders`

- `aws personalize list-schemas`

- `aws personalize list-solution-versions`

- `aws personalize list-solutions`

- `aws pinpoint get-apps`

- `aws pinpoint get-recommender-configurations`

- `aws pinpoint list-templates`

- `aws pinpoint-email get-account`

- `aws pinpoint-email get-dedicated-ips`

- `aws pinpoint-email get-deliverability-dashboard-options`

- `aws pinpoint-email get-blacklist-reports`

- `aws pinpoint-email list-configuration-sets`

- `aws pinpoint-email list-dedicated-ip-pools`

- `aws pinpoint-email list-deliverability-test-reports`

- `aws pinpoint-email list-email-identities`

- `aws pinpoint-sms-voice-v2 describe-account-attributes`

- `aws pinpoint-sms-voice-v2 describe-account-limits`

- `aws pinpoint-sms-voice-v2 describe-configuration-sets`

- `aws pinpoint-sms-voice-v2 describe-opt-out-lists`

- `aws pinpoint-sms-voice-v2 describe-phone-numbers`

- `aws pinpoint-sms-voice-v2 describe-pools`

- `aws pinpoint-sms-voice-v2 describe-sender-ids`

- `aws pinpoint-sms-voice-v2 describe-spend-limits`

- `aws pipes list-pipes`

- `aws polly describe-voices`

- `aws polly list-lexicons`

- `aws polly list-speech-synthesis-tasks`

- `aws pricing describe-services`

- `aws pricing get-products`

- `aws pricing get-attribute-values`

- `aws proton get-account-settings`

- `aws privatenetworks list-networks`

- `aws proton get-resources-summary`

- `aws proton get-service-sync-blocker-summary`

- `aws proton list-components`

- `aws proton list-deployments`

- `aws proton get-service-instance-sync-status`

- `aws proton list-environment-templates`

- `aws proton list-environments`

- `aws proton list-repositories`

- `aws proton list-service-instances`

- `aws proton list-environment-template-versions`

- `aws proton list-service-templates`

- `aws proton list-services`

- `aws proton list-service-template-versions`

- `aws qldb list-journal-s3-exports`

- `aws qldb list-ledgers`

- `aws ram get-resource-share-invitations`

- `aws ram list-permission-associations`

- `aws ram list-replace-permission-associations-work`

- `aws ram list-permissions`

- `aws ram list-resource-types`

- `aws rds describe-account-attributes`

- `aws rds describe-blue-green-deployments`

- `aws rds describe-certificates`

- `aws rds describe-db-cluster-automated-backups`

- `aws rds describe-db-cluster-endpoints`

- `aws rds describe-db-cluster-parameter-groups`

- `aws rds describe-db-cluster-snapshots`

- `aws rds describe-db-clusters`

- `aws rds describe-db-instance-automated-backups`

- `aws rds describe-db-instances`

- `aws rds describe-db-parameter-groups`

- `aws rds describe-db-proxies`

- `aws rds describe-db-proxy-endpoints`

- `aws rds describe-db-security-groups`

- `aws rds describe-db-snapshots`

- `aws rds describe-db-subnet-groups`

- `aws rds describe-event-categories`

- `aws rds describe-event-subscriptions`

- `aws rds describe-events`

- `aws rds describe-export-tasks`

- `aws rds describe-global-clusters`

- `aws rds describe-option-groups`

- `aws rds describe-pending-maintenance-actions`

- `aws rds describe-reserved-db-instances`

- `aws rds describe-source-regions`

- `aws redshift describe-account-attributes`

- `aws redshift describe-authentication-profiles`

- `aws redshift describe-cluster-db-revisions`

- `aws redshift describe-cluster-parameter-groups`

- `aws rds describe-db-engine-versions`

- `aws redshift describe-cluster-snapshots`

- `aws redshift describe-cluster-subnet-groups`

- `aws redshift describe-cluster-tracks`

- `aws redshift describe-cluster-versions`

- `aws redshift describe-clusters`

- `aws redshift describe-custom-domain-associations`

- `aws redshift describe-data-shares`

- `aws redshift describe-data-shares-for-consumer`

- `aws redshift describe-data-shares-for-producer`

- `aws redshift describe-endpoint-access`

- `aws redshift describe-endpoint-authorization`

- `aws redshift describe-event-subscriptions`

- `aws redshift describe-events`

- `aws redshift describe-event-categories`

- `aws redshift describe-hsm-client-certificates`

- `aws redshift describe-hsm-configurations`

- `aws redshift describe-orderable-cluster-options`

- `aws redshift describe-reserved-nodes`

- `aws redshift describe-reserved-node-offerings`

- `aws redshift describe-scheduled-actions`

- `aws redshift describe-snapshot-copy-grants`

- `aws redshift describe-snapshot-schedules`

- `aws redshift describe-tags`

- `aws redshift describe-usage-limits`

- `aws rds describe-reserved-db-instances-offerings`

- `aws redshift describe-storage`

- `aws redshift-data list-statements`

- `aws redshift-serverless list-endpoint-access`

- `aws redshift-serverless list-namespaces`

- `aws redshift-serverless list-recovery-points`

- `aws redshift-serverless list-snapshots`

- `aws redshift-serverless list-usage-limits`

- `aws redshift-serverless list-workgroups`

- `aws rekognition describe-projects`

- `aws rekognition list-collections`

- `aws rekognition list-stream-processors`

- `aws resiliencehub list-app-assessments`

- `aws resiliencehub list-apps`

- `aws resiliencehub list-resiliency-policies`

- `aws resiliencehub list-suggested-resiliency-policies`

- `aws resource-explorer-2 list-indexes`

- `aws resource-explorer-2 list-supported-resource-types`

- `aws resource-explorer-2 list-views`

- `aws resource-groups get-account-settings`

- `aws resource-groups list-groups`

- `aws resourcegroupstaggingapi get-resources`

- `aws resourcegroupstaggingapi get-tag-keys`

- `aws resourcegroupstaggingapi get-tag-values`

- `aws robomaker list-robot-applications`

- `aws robomaker list-simulation-applications`

- `aws robomaker list-simulation-job-batches`

- `aws robomaker list-simulation-jobs`

- `aws robomaker list-world-export-jobs`

- `aws robomaker list-world-generation-jobs`

- `aws robomaker list-world-templates`

- `aws robomaker list-worlds`

- `aws rolesanywhere list-crls`

- `aws rolesanywhere list-profiles`

- `aws rolesanywhere list-subjects`

- `aws rolesanywhere list-trust-anchors`

- `aws route53 get-checker-ip-ranges`

- `aws route53 get-geo-location`

- `aws route53 get-health-check-count`

- `aws route53 get-hosted-zone-count`

- `aws route53 get-traffic-policy-instance-count`

- `aws route53 list-cidr-collections`

- `aws route53 list-health-checks`

- `aws route53 list-geo-locations`

- `aws route53 list-hosted-zones`

- `aws route53 list-hosted-zones-by-name`

- `aws route53 list-query-logging-configs`

- `aws route53 list-reusable-delegation-sets`

- `aws route53 list-traffic-policies`

- `aws route53 list-traffic-policy-instances`

- `aws route53domains list-domains`

- `aws route53domains list-operations`

- `aws route53domains list-prices`

- `aws route53resolver get-outpost-resolver`

- `aws route53resolver list-firewall-configs`

- `aws route53resolver list-firewall-domain-lists`

- `aws route53resolver list-firewall-rule-group-associations`

- `aws route53resolver list-firewall-rule-groups`

- `aws route53resolver list-outpost-resolvers`

- `aws route53resolver list-resolver-configs`

- `aws route53resolver list-resolver-dnssec-configs`

- `aws route53resolver list-resolver-endpoints`

- `aws route53resolver list-resolver-query-log-config-associations`

- `aws route53resolver list-resolver-query-log-configs`

- `aws route53resolver list-resolver-rule-associations`

- `aws route53resolver list-resolver-rules`

- `aws rum list-app-monitors`

- `aws s3api list-buckets`

- `aws s3outposts list-endpoints`

- `aws s3outposts list-outposts-with-s3`

- `aws sagemaker get-sagemaker-servicecatalog-portfolio-status`

- `aws sagemaker list-actions`

- `aws sagemaker list-algorithms`

- `aws sagemaker list-app-image-configs`

- `aws sagemaker list-apps`

- `aws sagemaker list-artifacts`

- `aws sagemaker list-auto-ml-jobs`

- `aws sagemaker list-code-repositories`

- `aws sagemaker list-compilation-jobs`

- `aws sagemaker list-contexts`

- `aws sagemaker list-data-quality-job-definitions`

- `aws sagemaker list-domains`

- `aws sagemaker list-candidates-for-auto-ml-job`

- `aws sagemaker list-endpoint-configs`

- `aws sagemaker list-endpoints`

- `aws sagemaker list-experiments`

- `aws sagemaker list-feature-groups`

- `aws sagemaker list-flow-definitions`

- `aws sagemaker list-hubs`

- `aws sagemaker list-human-task-uis`

- `aws sagemaker list-hyper-parameter-tuning-jobs`

- `aws sagemaker list-images`

- `aws sagemaker list-inference-experiments`

- `aws sagemaker list-inference-recommendations-jobs`

- `aws sagemaker list-labeling-jobs`

- `aws sagemaker list-lineage-groups`

- `aws sagemaker list-model-bias-job-definitions`

- `aws sagemaker list-model-cards`

- `aws sagemaker list-model-explainability-job-definitions`

- `aws sagemaker list-model-metadata`

- `aws sagemaker list-model-package-groups`

- `aws sagemaker list-model-packages`

- `aws sagemaker list-model-card-export-jobs`

- `aws sagemaker list-model-quality-job-definitions`

- `aws sagemaker list-models`

- `aws sagemaker list-monitoring-alert-history`

- `aws sagemaker list-monitoring-executions`

- `aws sagemaker list-monitoring-schedules`

- `aws sagemaker list-notebook-instance-lifecycle-configs`

- `aws sagemaker list-notebook-instances`

- `aws sagemaker list-pipelines`

- `aws sagemaker list-processing-jobs`

- `aws sagemaker list-projects`

- `aws sagemaker list-spaces`

- `aws sagemaker list-resource-catalogs`

- `aws sagemaker list-studio-lifecycle-configs`

- `aws sagemaker list-subscribed-workteams`

- `aws sagemaker list-training-jobs`

- `aws sagemaker list-transform-jobs`

- `aws sagemaker list-trial-components`

- `aws sagemaker list-trials`

- `aws sagemaker list-user-profiles`

- `aws sagemaker list-workforces`

- `aws sagemaker list-workteams`

- `aws savingsplans describe-savings-plans`

- `aws savingsplans describe-savings-plans-offerings`

- `aws savingsplans describe-savings-plans-offering-rates`

- `aws scheduler list-schedule-groups`

- `aws scheduler list-schedules`

- `aws schemas list-discoverers`

- `aws schemas list-registries`

- `aws sdb list-domains`

- `aws secretsmanager get-random-password`

- `aws secretsmanager list-secrets`

- `aws securityhub describe-standards`

- `aws securityhub list-organization-admin-accounts`

- `aws securityhub list-security-control-definitions`

- `aws serverlessrepo list-applications`

- `aws service-quotas list-requested-service-quota-change-history`

- `aws service-quotas list-service-quota-increase-requests-in-template`

- `aws service-quotas list-services`

- `aws servicecatalog get-aws-organizations-access-status`

- `aws servicecatalog list-accepted-portfolio-shares`

- `aws servicecatalog list-portfolios`

- `aws servicecatalog list-provisioned-product-plans`

- `aws servicecatalog list-record-history`

- `aws servicecatalog list-service-actions`

- `aws servicecatalog-appregistry get-configuration`

- `aws servicecatalog-appregistry list-applications`

- `aws servicecatalog-appregistry list-attribute-groups`

- `aws servicediscovery list-namespaces`

- `aws servicediscovery list-operations`

- `aws servicediscovery list-services`

- `aws ses describe-active-receipt-rule-set`

- `aws ses get-account-sending-enabled`

- `aws ses get-send-quota`

- `aws ses get-identity-dkim-attributes`

- `aws ses get-send-statistics`

- `aws ses get-identity-mail-from-domain-attributes`

- `aws ses get-identity-notification-attributes`

- `aws ses list-configuration-sets`

- `aws ses list-custom-verification-email-templates`

- `aws ses list-identities`

- `aws ses get-identity-verification-attributes`

- `aws ses list-receipt-filters`

- `aws ses list-receipt-rule-sets`

- `aws ses get-identity-policies`

- `aws ses list-templates`

- `aws ses list-identity-policies`

- `aws sesv2 get-account`

- `aws sesv2 get-blacklist-reports`

- `aws sesv2 get-dedicated-ips`

- `aws sesv2 get-deliverability-dashboard-options`

- `aws sesv2 list-configuration-sets`

- `aws sesv2 list-contact-lists`

- `aws sesv2 list-custom-verification-email-templates`

- `aws sesv2 list-dedicated-ip-pools`

- `aws sesv2 list-deliverability-test-reports`

- `aws sesv2 list-email-identities`

- `aws sesv2 list-email-templates`

- `aws sesv2 list-export-jobs`

- `aws sesv2 list-recommendations`

- `aws sesv2 list-suppressed-destinations`

- `aws shield describe-attack-statistics`

- `aws shield describe-attack`

- `aws shield get-subscription-state`

- `aws shield list-attacks`

- `aws signer list-signing-jobs`

- `aws signer list-signing-platforms`

- `aws signer list-signing-profiles`

- `aws simspaceweaver list-simulations`

- `aws snowball describe-addresses`

- `aws snowball get-snowball-usage`

- `aws snowball list-clusters`

- `aws snowball list-jobs`

- `aws snowball list-compatible-images`

- `aws snowball list-long-term-pricing`

- `aws sns get-sms-attributes`

- `aws sns get-sms-sandbox-account-status`

- `aws sns list-origination-numbers`

- `aws sns list-phone-numbers-opted-out`

- `aws sns list-platform-applications`

- `aws sns list-sms-sandbox-phone-numbers`

- `aws sns list-subscriptions`

- `aws :: (ERROR/3) Anonymous hyperlink mismatch: 1 references but 0 targets.`

- `aws See "backrefs" attribute for IDs.`

- `aws sns list-topics`

- `aws sqs list-queues`

- `aws ssm describe-activations`

- `aws ssm describe-automation-executions`

- `aws ssm describe-instance-information`

- `aws ssm describe-inventory-deletions`

- `aws ssm describe-instance-patch-states-for-patch-group`

- `aws ssm describe-maintenance-windows`

- `aws ssm describe-ops-items`

- `aws ssm describe-parameters`

- `aws ssm describe-patch-baselines`

- `aws ssm describe-patch-groups`

- `aws ssm describe-patch-group-state`

- `aws ssm get-default-patch-baseline`

- `aws ssm get-inventory`

- `aws ssm get-inventory-schema`

- `aws ssm get-connection-status`

- `aws ssm get-ops-summary`

- `aws ssm list-associations`

- `aws ssm get-parameters`

- `aws ssm list-command-invocations`

- `aws ssm list-commands`

- `aws ssm list-compliance-summaries`

- `aws ssm get-patch-baseline-for-patch-group`

- `aws ssm list-ops-item-events`

- `aws ssm list-ops-metadata`

- `aws ssm list-resource-compliance-summaries`

- `aws ssm list-resource-data-sync`

- `aws ssm-contacts list-contacts`

- `aws ssm-contacts list-engagements`

- `aws ssm-incidents list-incident-records`

- `aws ssm-incidents list-replication-sets`

- `aws ssm-incidents list-response-plans`

- `aws ssm list-documents`

- `aws ssm-sap list-applications`

- `aws ssm-sap list-components`

- `aws ssm-sap list-databases`

- `aws sso-admin list-instances`

- `aws stepfunctions list-activities`

- `aws stepfunctions list-state-machines`

- `aws storagegateway describe-tape-archives`

- `aws storagegateway list-automatic-tape-creation-policies`

- `aws storagegateway list-file-shares`

- `aws storagegateway list-file-system-associations`

- `aws storagegateway list-gateways`

- `aws storagegateway list-tape-pools`

- `aws storagegateway list-tapes`

- `aws storagegateway list-volumes`

- `aws sts get-caller-identity`

- `aws sts get-session-token`

- `aws sts get-federation-token`

- `aws support-app get-account-alias`

- `aws support-app list-slack-channel-configurations`

- `aws support-app list-slack-workspace-configurations`

- `aws synthetics describe-canaries`

- `aws synthetics describe-canaries-last-run`

- `aws synthetics describe-runtime-versions`

- `aws synthetics list-groups`

- `aws textract list-adapter-versions`

- `aws textract list-adapters`

- `aws timestream-query describe-endpoints`

- `aws timestream-query list-scheduled-queries`

- `aws timestream-write describe-endpoints`

- `aws timestream-write list-batch-load-tasks`

- `aws timestream-write list-databases`

- `aws timestream-write list-tables`

- `aws tnb list-sol-function-instances`

- `aws tnb list-sol-function-packages`

- `aws tnb list-sol-network-instances`

- `aws tnb list-sol-network-operations`

- `aws tnb list-sol-network-packages`

- `aws transcribe list-call-analytics-categories`

- `aws transcribe list-call-analytics-jobs`

- `aws transcribe list-language-models`

- `aws transcribe list-medical-transcription-jobs`

- `aws transcribe list-medical-vocabularies`

- `aws transcribe list-transcription-jobs`

- `aws transcribe list-vocabularies`

- `aws transcribe list-vocabulary-filters`

- `aws transfer list-certificates`

- `aws transfer list-connectors`

- `aws transfer list-profiles`

- `aws transfer list-security-policies`

- `aws transfer list-servers`

- `aws transfer list-workflows`

- `aws translate list-languages`

- `aws translate list-parallel-data`

- `aws translate list-terminologies`

- `aws translate list-text-translation-jobs`

- `aws verifiedpermissions list-policy-stores`

- `aws voice-id list-domains`

- `aws vpc-lattice list-service-networks`

- `aws vpc-lattice list-services`

- `aws vpc-lattice list-target-groups`

- `aws waf get-change-token`

- `aws waf list-byte-match-sets`

- `aws waf list-geo-match-sets`

- `aws waf list-ip-sets`

- `aws waf list-rate-based-rules`

- `aws waf list-regex-match-sets`

- `aws waf list-regex-pattern-sets`

- `aws waf list-rule-groups`

- `aws waf list-rules`

- `aws waf list-size-constraint-sets`

- `aws waf list-sql-injection-match-sets`

- `aws waf list-subscribed-rule-groups`

- `aws waf list-web-acls`

- `aws waf list-xss-match-sets`

- `aws waf-regional get-change-token`

- `aws waf-regional list-byte-match-sets`

- `aws waf-regional list-geo-match-sets`

- `aws waf-regional list-ip-sets`

- `aws waf-regional list-rate-based-rules`

- `aws waf-regional list-regex-match-sets`

- `aws waf-regional list-regex-pattern-sets`

- `aws waf-regional list-rule-groups`

- `aws waf-regional list-rules`

- `aws waf-regional list-size-constraint-sets`

- `aws waf-regional list-sql-injection-match-sets`

- `aws waf-regional list-subscribed-rule-groups`

- `aws waf-regional list-web-acls`

- `aws waf-regional list-xss-match-sets`

- `aws wellarchitected get-profile-template`

- `aws wellarchitected list-lenses`

- `aws wellarchitected list-notifications`

- `aws wellarchitected list-profile-notifications`

- `aws wellarchitected list-profiles`

- `aws wellarchitected list-review-templates`

- `aws wellarchitected list-share-invitations`

- `aws wellarchitected list-workloads`

- `aws wisdom list-assistants`

- `aws wisdom list-knowledge-bases`

- `aws workmail list-organizations`

- `aws workspaces describe-applications`

- `aws workspaces describe-connection-aliases`

- `aws workspaces describe-ip-groups`

- `aws workspaces describe-workspace-bundles`

- `aws workspaces describe-workspace-directories`

- `aws workspaces describe-workspace-images`

- `aws workspaces describe-workspaces`

- `aws workspaces describe-workspaces-connection-status`

- `aws workspaces-web list-browser-settings`

- `aws workspaces-web list-ip-access-settings`

- `aws workspaces-web list-network-settings`

- `aws workspaces-web list-portals`

- `aws workspaces-web list-trust-stores`

- `aws workspaces-web list-user-access-logging-settings`

- `aws workspaces-web list-user-settings`

- `aws xray get-encryption-config`

- `aws xray get-groups`

- `aws xray get-sampling-rules`

- `aws xray get-sampling-statistic-summaries`

- `aws xray list-resource-policies`