AWS managed policies

• https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html
• https://docs.aws.amazon.com/aws-managed-policy/latest/reference/policy-list.html
• arn:aws:iam::aws:policy/service-role/

• Terraform resource: aws_ssoadmin_managed_policy_attachment applied to permission_set_arn

Examples

• ReadOnlyAccess: arn:aws:iam::aws:policy/ReadOnlyAccess
• ViewOnlyAccess: arn:aws:iam::aws:policy/ViewOnlyAccess

EKS:

• arn:aws:iam::aws:policy/AmazonEKSClusterPolicy. As of Nov 2023 there is an additional of 12 AWS managed policies for EKS.
• AmazonEKS_CNI_Policy

ECS:

• AmazonECSTaskExecutionRolePolicy

Amazon Inspector

• AmazonInspectorReadOnlyAccess
• AmazonInspector2ReadOnlyAccess

• AdministratorAccess: arn:aws:iam::aws:policy/AdministratorAccess
• IAMUserChangePassword
• SecurityAudit
• ViewBilling

Alexa

• arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup

AWS managed Job functions

• Billing: arn:aws:iam::aws:policy/job-function/Billing/
• DataScientist
• DatabaseAdministrator
• NetworkAdministrator
• ReadOnlyAccess
• SecurityAudit: arn:aws:iam::aws:policy/SecurityAudit
• SupportUser
• SystemAdministrator

Related terms

• AWS managed Job functions
• Inline policies
• AWS policy
• AWSServiceCatalogAdminFullAccess
• IAM roles: aws iam create-role
• aws iam attach-role-policy
• AWSSecretsManagerReadWriteAccess managed policy
• managed_policies

See also

• aws iam [ list-policies | list-attached-user-policies | list-group-policies | list-role-policies | put-group-policy | put-role-policy | put-user-policy | create-policy | attach-role-policy ]
• AWS managed policies: ReadOnlyAccess, ViewOnlyAccess, AdministratorAccess, SecurityAudit, ViewBilling, AmazonEKSClusterPolicy, List of AWS policies
• AWS policies: managed policies, Inline, Job functions, reference, AWS trust policy, AWS Service Control Policy (SCP), Resource-based policies, Identity-based policies, permissions boundaries, "Resource":, Job function, AWS Policy Generator, s3:, lambda:, cloudwatch:, AWSSecretsManagerReadWriteAccess

https://docs.aws.amazon.com/singlesignon/latest/userguide/permissionsetpredefined.html