AWS Fundamentals Logo
AWS Fundamentals
cloudtrail:*

AWS AWS CloudTrail IAM Actions

66 IAM actions for cloudtrail:*

Actions

66 actions available. Filter by access level or search by name.

Filter:
ActionAccess Level
cloudtrail:AddTags
Tagging
cloudtrail:CancelQuery
Write
cloudtrail:CreateChannel
Write
cloudtrail:CreateDashboard
Write
cloudtrail:CreateEventDataStore
Write
cloudtrail:CreateServiceLinkedChannel
Write
cloudtrail:CreateTrail
Write
cloudtrail:DeleteChannel
Write
cloudtrail:DeleteDashboard
Write
cloudtrail:DeleteEventDataStore
Write
cloudtrail:DeleteResourcePolicy
Permissions
cloudtrail:DeleteServiceLinkedChannel
Write
cloudtrail:DeleteTrail
Write
cloudtrail:DeregisterOrganizationDelegatedAdmin
Write
cloudtrail:DescribeQuery
Read
cloudtrail:DescribeTrails
Read
cloudtrail:DisableFederation
Write
cloudtrail:EnableFederation
Write
cloudtrail:GenerateQuery
Read
cloudtrail:GenerateQueryResultsSummary
Read
cloudtrail:GetChannel
Read
cloudtrail:GetDashboard
Read
cloudtrail:GetEventConfiguration
Read
cloudtrail:GetEventDataStore
Read
cloudtrail:GetEventDataStoreData
Read
cloudtrail:GetEventSelectors
Read
cloudtrail:GetImport
Read
cloudtrail:GetInsightSelectors
Read
cloudtrail:GetQueryResults
Read
cloudtrail:GetResourcePolicy
Permissions
cloudtrail:GetServiceLinkedChannel
Read
cloudtrail:GetTrail
Read
cloudtrail:GetTrailStatus
Read
cloudtrail:ListChannels
List
cloudtrail:ListDashboards
List
cloudtrail:ListEventDataStores
List
cloudtrail:ListImportFailures
List
cloudtrail:ListImports
List
cloudtrail:ListInsightsData
List
cloudtrail:ListPublicKeys
List
cloudtrail:ListQueries
List
cloudtrail:ListServiceLinkedChannels
List
cloudtrail:ListTags
Tagging
cloudtrail:ListTrails
List
cloudtrail:LookupEvents
List
cloudtrail:PutEventConfiguration
Write
cloudtrail:PutEventSelectors
Write
cloudtrail:PutInsightSelectors
Write
cloudtrail:PutResourcePolicy
Permissions
cloudtrail:RegisterOrganizationDelegatedAdmin
Write
cloudtrail:RemoveTags
Tagging
cloudtrail:RestoreEventDataStore
Write
cloudtrail:SearchSampleQueries
List
cloudtrail:StartDashboardRefresh
Write
cloudtrail:StartEventDataStoreIngestion
Write
cloudtrail:StartImport
Write
cloudtrail:StartLogging
Write
cloudtrail:StartQuery
Write
cloudtrail:StopEventDataStoreIngestion
Write
cloudtrail:StopImport
Write
cloudtrail:StopLogging
Write
cloudtrail:UpdateChannel
Write
cloudtrail:UpdateDashboard
Write
cloudtrail:UpdateEventDataStore
Write
cloudtrail:UpdateServiceLinkedChannel
Write
cloudtrail:UpdateTrail
Write

Resource Types

ARN patterns for resources in this service.

ResourceARN Pattern
${Resource}arn:aws:cloudtrail:${Region}:${Account}:${Resource}

Condition Keys

Condition keys you can use in IAM policy conditions for this service.

aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeys

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

Total Actions66
Prefixcloudtrail
Resource Types1
Condition Keys3

Access Level Breakdown

Read
16
Write
32
List
12
Permissions
3
Tagging
3