permissions_scope_account.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowLintingPolicies",
            "Effect": "Allow",
            "Action": [
                "access-analyzer:ValidatePolicy",
                "acm-pca:GetPolicy",
                "acm-pca:ListCertificateAuthorities",
                "appmesh:GetMeshPolicy",
                "appsync:GetResourcePolicy",
                "backup:GetBackupVaultAccessPolicy",
                "backup:ListBackupVaults",
                "cloudtrail:GetResourcePolicy",
                "cloudtrail:ListChannels",
                "codeartifact:GetDomainPermissionsPolicy",
                "codeartifact:GetRepositoryPermissionsPolicy",
                "codeartifact:ListDomains",
                "codeartifact:ListRepositories",
                "codebuild:GetResourcePolicy",
                "codebuild:ListProjects",
                "codebuild:ListReportGroups",
                "datazone:GetDomainSharingPolicy",
                "dynamodb:DescribeTable",
                "dynamodb:GetResourcePolicy",
                "dynamodb:ListTables",
                "ec2:DescribeRegions",
                "ec2:DescribeVpcEndpoints",
                "ec2:GetResourcePolicy",
                "ecr:DescribeRepositories",
                "ecr:GetRepositoryPolicy",
                "ecr:GetRegistryPolicy",
                "ecr-public:DescribeRepositories",
                "ecr-public:GetRepositoryPolicy",
                "elasticfilesystem:DescribeFileSystemPolicy",
                "elasticfilesystem:DescribeFileSystems",
                "es:DescribeDomain",
                "es:ListDomainNames",
                "events:ListEventBuses",
                "glacier:GetVaultAccessPolicy",
                "glacier:GetVaultLock",
                "glacier:ListVaults",
                "glue:GetResourcePolicy",
                "iam:GetGroupPolicy",
                "iam:GetPolicyVersion",
                "iam:GetRolePolicy",
                "iam:GetUserPolicy",
                "iam:ListGroupPolicies",
                "iam:ListGroups",
                "iam:ListPolicies",
                "iam:ListPolicyVersions",
                "iam:ListRolePolicies",
                "iam:ListRoles",
                "iam:ListUserPolicies",
                "iam:ListUsers",
                "iot:GetPolicyVersion",
                "iot:ListPolicies",
                "iot:ListPolicyVersions",
                "kinesis:GetResourcePolicy",
                "kinesis:ListStreamConsumers",
                "kinesis:ListStreams",
                "kms:DescribeKey",
                "kms:GetKeyPolicy",
                "kms:ListKeys",
                "lambda:GetLayerVersionPolicy",
                "lambda:GetPolicy",
                "lambda:ListFunctions",
                "lambda:ListLayers",
                "lambda:ListLayerVersions",
                "lambda:ListVersionsByFunction",
                "lex:DescribeResourcePolicy",
                "lex:ListBotAliases",
                "lex:ListBots",
                "logs:DescribeDeliveryDestinations",
                "logs:DescribeDestinations",
                "logs:DescribeResourcePolicies",
                "logs:GetDeliveryDestinationPolicy",
                "mediastore:GetContainerPolicy",
                "mediastore:ListContainers",
                "organizations:DescribeOrganization",
                "organizations:DescribePolicy",
                "organizations:DescribeResourcePolicy",
                "organizations:ListPolicies",
                "organizations:ListRoots",
                "ram:GetPermission",
                "ram:GetResourcePolicies",
                "ram:ListPermissions",
                "ram:ListResources",
                "redshift-serverless:GetResourcePolicy",
                "redshift-serverless:ListSnapshots",
                "refactor-spaces:GetResourcePolicy",
                "refactor-spaces:ListEnvironments",
                "rekognition:DescribeProjects",
                "rekognition:ListProjectPolicies",
                "s3:GetAccessPointPolicy",
                "s3:GetAccessPointPolicyForObjectLambda",
                "s3:GetBucketLocation",
                "s3:GetBucketPolicy",
                "s3:GetMultiRegionAccessPointPolicy",
                "s3:ListAccessPoints",
                "s3:ListAccessPointsForObjectLambda",
                "s3:ListAllMyBuckets",
                "s3:ListMultiRegionAccessPoints",
                "s3express:GetBucketPolicy",
                "s3express:ListAllMyDirectoryBuckets",
                "schemas:GetResourcePolicy",
                "schemas:ListRegistries",
                "secretsmanager:GetResourcePolicy",
                "secretsmanager:ListSecrets",
                "securityhub:DescribeProducts",
                "securityhub:ListEnabledProductsForImport",
                "ses:GetIdentityPolicies",
                "ses:ListIdentities",
                "ses:ListIdentityPolicies",
                "sns:GetTopicAttributes",
                "sns:ListTopics",
                "sqs:GetQueueAttributes",
                "sqs:ListQueues",
                "ssm:DescribeParameters",
                "ssm:GetResourcePolicies",
                "ssm-contacts:GetContactPolicy",
                "ssm-contacts:ListContacts",
                "ssm-incidents:GetResourcePolicies",
                "ssm-incidents:ListResponsePlans",
                "sso:DescribePermissionSet",
                "sso:GetInlinePolicyForPermissionSet",
                "sso:ListInstances",
                "sso:ListPermissionSets"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AllowLintingPoliciesForAPIGatewayRESTAPIs",
            "Effect": "Allow",
            "Action": "apigateway:GET",
            "Resource": "arn:aws:apigateway:*::/restapis"
        }
    ]
}