Correct S3 and CloudFormation action names s3:ListBuckets and s3:ListObjectsV2 are API operation names, not IAM actions; the IAM actions are s3:ListAllMyBuckets and s3:ListBucket. As written the policy denied both S3 calls. cloudformation:DescribeStacks without a stack name authorises against cloudformation:ListStacks, which the policy did not grant. Verified against a role built from this policy: all 36 probed API calls are allowed and writes are still refused.
Key Bindings: o opens in AWS console, O copies the URL (v3.56.0)
Add Environment Variables page; link it from Home
Pre-include read actions for the next release's resource types Transfer Family (servers + AS2 agreements/profiles/certificates), EC2 launch templates, and VPC peering connections — alongside the MWAA actions already added. Roles built from this page won't need another update when these ship.
Add MWAA read actions ahead of upcoming mwaa resource support airflow:ListEnvironments + airflow:GetEnvironment — roles built from this page were denying MWAA enumeration; the mwaa resource type ships next.
Add Cost Explorer actions to the minimal read-only policy v3.48 added the Cost Explorer screen; roles built from this page could not fetch it. New CostExplorerReadOnly statement: ce:GetCostAndUsage, ce:GetCostAndUsageWithResources, ce:GetAnomalies, ce:GetDimensionValues.
Update Key Bindings to match source of truth Add J (JSON view), t (CloudTrail), Ctrl+Z (attention filter), ! (error log). Fix sorting keys (1-0 column position), load more key (m not M), and include JSON in wrap/search descriptions.
Add Color Themes wiki page
Add View Customization wiki page
docs: add Child Views wiki page
docs: add Minimal IAM Profile wiki page (#113) Adds a dedicated read-only AWS IAM role setup guide covering all 66 resource types — full policy JSON, CLI steps, and Terraform module.
Add Key Bindings wiki page
Initial Home page